Re: Storing Photos in Active Directory - jpegPhoto attribute - User class
From: Net Coder (netcoder77-msnews_at_yahoo.com)
Date: 07/24/04
- Next message: Net Coder: "Secure Scheduling of Remote Tasks"
- Previous message: Jared: "Re: find string if not preceded with @ anywhere in the string"
- In reply to: Joe Kaplan \(MVP - ADSI\): "Re: Storing Photos in Active Directory - jpegPhoto attribute - User class"
- Next in thread: Joe Kaplan \(MVP - ADSI\): "Re: Storing Photos in Active Directory - jpegPhoto attribute - User class"
- Reply: Joe Kaplan \(MVP - ADSI\): "Re: Storing Photos in Active Directory - jpegPhoto attribute - User class"
- Messages sorted by: [ date ] [ thread ]
Date: Sun, 25 Jul 2004 04:24:50 +1000
Joe Kaplan (MVP - ADSI) wrote:
> On the activedir.org mailing list, there was a discussion about this a few
> months ago. Depending on the size of the objects, this may or may not be a
> problem with replication. That tends to be very sensitive to your actual
> deployment and how often they change (probably not very often I assume).
> You might want to add them to the directory slowly if you are worried and
> try to keep the sizes down.
> However, one thing to consider is that by default, users have rights to
> modify this property directly with their own account AND the attribute has
> no max size. As such, it could be used maliciously by some users as a DoS
> attack on your DC if they decided to upload their swap file or something
> similarly large. You might want to think carefully about allowing users
> rights to modify this attribute directly.
Hmm. The object does not have maximum or minimum size set but the ACL
on a W2K3 AD server in native mode doesn't seem to allow SELF write to
the jpegPhoto attribute/property, or am I missing something?
- Next message: Net Coder: "Secure Scheduling of Remote Tasks"
- Previous message: Jared: "Re: find string if not preceded with @ anywhere in the string"
- In reply to: Joe Kaplan \(MVP - ADSI\): "Re: Storing Photos in Active Directory - jpegPhoto attribute - User class"
- Next in thread: Joe Kaplan \(MVP - ADSI\): "Re: Storing Photos in Active Directory - jpegPhoto attribute - User class"
- Reply: Joe Kaplan \(MVP - ADSI\): "Re: Storing Photos in Active Directory - jpegPhoto attribute - User class"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
