Question

I m using LDAP.TS to automatize the users creation from glpi(don t matters on this history); So, after create the user, he becomes disabled, from my researchs, the property i need to pass on the ceration of the user are the : userAccountControl. But if i pass this value, i will receive the follow error 0000052D: SvcErr: DSID-031A12D2, problem 5003 (WILL_NOT_PERFORM), data 0. Is there a option on Active Directory that don t allow the bind of this property?

<<>User Example>>

const user = {
        accountExpires:  9223372036854775807 ,
        cn:  Francine Vidal De Souza ,
        company:  Tecverde ,
        department:  Diretoria Administrativo Financeira ,
        description:  55. Diretoria Administrativo Financeira ,
        displayName:  Francine Vidal De Souza ,
        distinguishedName:  CN=Francine Vidal De Souza, OU=USUARIOS,OU=TECVERDE,DC=tecverde,DC=local ,
        givenName:  Francine Vidal ,
        instanceType:  4 ,
        mail:  francine.vidal@tecverde.com.br ,
        manager:  CN=Ronaldo Passeri,OU=USUARIOS,OU=TECVERDE,DC=tecverde,DC=local ,
        name:  Francine Vidal De Souza ,
        objectClass: [  top ,  person ,  organizationalPerson ,  user  ],
        physicalDeliveryOfficeName:  Diretoria Administrativo Financeira ,
        sn:  De Souza ,
        title:  Cfo ,
        userPrincipalName:  francine.vidal@tecverde.local ,
        sAMAccountName:  francine.vidal ,
        userPassword:  ***** ,
        userAccountControl: `66048`,
        objectCategory:  CN=Person,CN=Schema,CN=Configuration,DC=tecverde,DC=local 
    }

我只需要用户能够直接从酒吧的产生中受益,而不需要主动向用户提供服务。

Answer 1

你们是否使用LDAPS(LDAP over SSL on Port 636)? 连接必须加以加密,以便确定密码。如果账户没有密码,则该账户通常会因违约而残疾,如果你试图对密码和未加密的链接提出密码,或试图促成一个没有密码的账户,则将出现“不愿意履行”错误。

<编码>用户密码属性不得用来确定密码。设置密码的实际属性是:>,,但采用具体格式。这项职能将提供给你(从 :):

function encodePassword(password) {
    return new Buffer( "  + password +  " ,  utf16le ).toString();
}

因此,不在此列:

userPassword:  ***** ,

使用:

unicodePwd: encodePassword( ***** ),

友情链接