Ldap – Active Directory : AdExplorer and LDAP browsers

active-directoryldap

I can access my corp AD with SysInternals' "AdExplorer" with no problems. however, when I try to use generic LDAP browser (ldp.exe in my example) to access the same AD directory I can't get the required protocol/auth method. I think I have tried them all.

what protocol/settings does AdExplorer use by default?

Best Answer

I'm pretty sure it uses Kerberos/NTLM.

Make sure you're not only connecting to AD with LDP, but that you're also binding (ie- authenticating). It's a 2-step process with LDP.

Connection menu -> Connect. Enter the DC name (or domain name) and LDAP port.
Connection menu -> Bind. Enter your authentication.

Once you do that you should be able to perform other functions using LDP.

Related Solutions

Ubuntu LDAP Make Home Directory

The way we solved this is to add another attribute to LDAP, something like linuxHomeDirectory . Then you can create a mapping in ldap.conf:

nss_map_attribute homeDirectory linuxHomeDirectory

The for each user you set the attribute in LDAP to the path you want for their Linux home dir, such as /home/$username or whatnot.

If you have your home directories served from OS X server, you can mount those with an automounter in the /Volumes/$servername/$path hierarchy on Linux and then you don't need to do any LDAP attribute mangling.

More info: Here's an article how to extend the LDAP schema in OpenDirectory: http://www.afp548.com/article.php?story=20060228230005854

To populate the user attributes you can use the ldapadd and ldapmodify tools.

Ldap – Active Directory LDAP and user issues (using apache2 for svn access)

When you're doing LDAP logins, the workstation being logged into is the server providing the LDAP service. To do what you want, you'll have to add dmain and diffldapserver to the 'allow logins from' tab on those users.

Best Answer

Related Solutions

Ubuntu LDAP Make Home Directory

Ldap – Active Directory LDAP and user issues (using apache2 for svn access)

Related Topic