Re: Storing Photos in Active Directory - jpegPhoto attribute - User class

From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 07/22/04


Date: Thu, 22 Jul 2004 09:21:50 -0500

On the activedir.org mailing list, there was a discussion about this a few
months ago. Depending on the size of the objects, this may or may not be a
problem with replication. That tends to be very sensitive to your actual
deployment and how often they change (probably not very often I assume).
You might want to add them to the directory slowly if you are worried and
try to keep the sizes down.

However, one thing to consider is that by default, users have rights to
modify this property directly with their own account AND the attribute has
no max size. As such, it could be used maliciously by some users as a DoS
attack on your DC if they decided to upload their swap file or something
similarly large. You might want to think carefully about allowing users
rights to modify this attribute directly.

Joe K.

"Net Coder" <netcoder77-msnews@yahoo.com> wrote in message
news:%23mTgiv9bEHA.1764@TK2MSFTNGP10.phx.gbl...
> Joe Kaplan (MVP - ADSI) wrote:
> > It is pretty easy to do in .NET. Not as easy in VBScript.
> >
> > Essentially, you just read the data you want into a byte array (from a
> > filestream or something). Then, bind to the object with the
DirectoryEntry
> > class and call the Add method on the PropertyValueCollection for that
> > attribute with the byte array. Then call CommitChanges. Download would
be
> > basically just the opposite.
> Sounds straightforwards enough, don't know why I thought it was more
> complicated than it sounds. I'll have to try it out.
>
> > I believe Matjaz Ladava posted a sample showing how to do this in .NET
in
> > one of the MS newsgroups that you could find with a Google search pretty
> > easily.
> Thanks for that information. I'll now search for the author's name.
> Thanks for your suggestions.
>
> On a different note, does anyone know if there would be any problems
> with storing large number of jpeg images in the user object as part of
> AD? How is replication affected? And caveats?
>
> >
> > Joe K.
> >
> >
> > "netcoder77" <netcoder77-msnews@yahoo.com> wrote in message
> > news:OquBii0bEHA.2972@TK2MSFTNGP12.phx.gbl...
> >
> >>Has anyone tried this in VB .NET or via VBScript? Can it be done? How
> >>do we handle retrieving a binary data format (the photo) using ADSI or
> >>VB .NET? All my searching on the net yielded no useful results except
> >>for a half completed Perl script which claimed to be able to upload and
> >>download photos stored in AD as part of the User account.
> >
> >
> >



Relevant Pages

  • Re: Storing Photos in Active Directory - jpegPhoto attribute - User class
    ... However, one thing to consider is that by default, users have rights to ... rights to modify this attribute directly. ... >> one of the MS newsgroups that you could find with a Google search pretty ... >> Joe K. ...
    (microsoft.public.dotnet.languages.vb)
  • Re: self-register problem (linker bug?)
    ... I have the right to modify the registry. ... message actually correct [Do you have rights to modify the Registry]? ...
    (microsoft.public.vc.mfc)
  • Re: User rights.
    ... > all permissions and rights granted to any and all groups ... >From this I think I can infer that I am a member of both the administrator ... group as well as the user group and as such denying delete rights to the ... Keep in mind that modify includes delete. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Oh.... Im just wondering whos seen this stumper... RESOLVED !
    ... but I wonder if you saw any controls loaded in the modify ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... just has the granular attribute write permissions ...
    (microsoft.public.windows.server.active_directory)
  • Re: Modify default replication wait period in ADAM
    ... This posting is provided "AS IS" with no warranties, and confers no rights ... > Use of included script samples are subject to the terms specified at ... >> I am trying to find out how to modify the default amount of time an ADAM ... > instance waits to push a directory change to a member of a replica set. ...
    (microsoft.public.windows.server.active_directory)

Quantcast