Re: Sun Java System Directory Server Authentication

Willy Denoyette [MVP] wrote:
Can you imagine if the web client facilities only allowed you to fetch
pages from IIS?

This is Ok for simple HTML, all webservers will handle that, but you can't expect a Solaris
"Webserver" to handle asp or asp.net requests.

I'd expect it to handle HTTP requests though - and that's closer to
what's being requested, I believe.

The same analogy goes for LDAP, you can't expect it to handle authentication of Windows
accounts, right? LDAP is not an authentication protocol and an LDAP server (just as an AD on
Windows) is not required to "handle" all possible authentication type requests either, nor
should you expect it to implement the AD schema.

LDAP isn't *just* an authentication protocol, but there is the concept
of "authenticate this user by trying to log into an LDAP server with
this username/password".

That said, the System.DirectoryServices.Protocols namespace offers low-level access to the
LDAP V3 protocol, so this is where the OP should start with.

Right.

Jon

.

Relevant Pages

  • Re: LDAP proxy, forwarding or redirect
    ... forward requests, but you would be much better served by ADAM and its AD ... This will give you a flexible, extensible LDAP ... OpenLDAP or ADAM instance. ... anything vs. pushing subsets of data to the DMZ. ...
    (microsoft.public.windows.server.active_directory)
  • Re: LDAP proxy, forwarding or redirect
    ... I will install ADAM and use that. ... forward requests, but you would be much better served by ADAM and its AD ... This will give you a flexible, extensible LDAP ... anything vs. pushing subsets of data to the DMZ. ...
    (microsoft.public.windows.server.active_directory)
  • Re: How-to monitor LDAP requests load on Active Directory
    ... Outside of MOM, perfmon comes to mind. ... There are other counters of interest than just LDAP requests, ...
    (microsoft.public.windows.server.active_directory)
  • Re: DNS/Kerberos/LDAP integration question
    ... answer my question of whether LDAP is involved in the logon process. ... > protocol (DAP, but that was designed for use with X.500 directories. ... > Kerberos is an authentication protocol and DNS is a directory access ...
    (microsoft.public.windows.server.active_directory)
  • Re: Adding Solaris 10 machine to Active Directory Authentication
    ... Well LDAP isn't used for authentication for machines joined to AD because LDAP ... isn't an authentication protocol and is pretty insecure. ... Joe Richards Microsoft MVP Windows Server Directory Services ... Paul wrote: ...
    (microsoft.public.windows.server.active_directory)