Re: check a user password

"webrod" <rodolphe.aoustin@xxxxxxxxx> wrote in message news:1166912590.666036.170890@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Willy Denoyette [MVP] a écrit :

"webrod" <rodolphe.aoustin@xxxxxxxxx> wrote in message
news:1166795586.681185.141220@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> Hi all,
>
> how can I check a user/password in a LDAP ?
>

Which LDAP? AD or other?

Actually, any.
My customer can have AD, ADAM or a Novell AD (don't know yet which
one).
I was doing some test with ADAM and thought I could get the encoded
password (MD5) to compare with the password provided by the user.

You can't retrieve the password of a windows account from the AD.

even the encoded one??

No, while you can set or modify the "userpassword" property, you can't retrive this property from AD or ADAM (now called AD LDS), don't know for sure about NDS but I would be surprised if you could.
Try for yourself using adsiedit, bind to NDS, AD or ADAM and try to get the "userpassword" property, you'll see that this is always empty.
Checking the validity of a password must be done by "authenticating", when authenticating an ADAM user you'll have perform an LDAP Bind operation, specifying the adam user's credentials.
Note, that "ADAM User" identities are NOT "Windows User" identities, binding against ADAM using an ADAM user's credentials can only be done using basic authentication.

Willy.





.

Relevant Pages

  • Re: Keep ADAM proxies up-to-date through LDIFDE
    ... ADAM is AD LDS it's stamped all over it in W2k8 server so we just ... I'm not so sure about the currency of your perf observations; other LDAP ... surprise" does not cut it IMO if we want to win people over to ADAM. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM Bind Redirection question
    ... ADAM relies on windows auth mechanisms, it does not keep an ldap connection ... Windows domain in order to enable proxy binds. ... the idea here is to use AD secure binding with Active ...
    (microsoft.public.windows.server.active_directory)
  • Re: Virtual List View functionality in ADAM and Outlook
    ... point to ADAM from outlook using generic LDAP then I at least have a solution ... As for VLV- ADAM does support it. ... continue to try to manage this volume of information with MIIS? ... but my understanding of VLV's is that the client has to ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD or ADAM as a user database
    ... SQL system. ... ADAM with SSL will ... Learning how to design LDAP schema isn't hard as there isn't too much to it, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Virtual List View functionality in ADAM and Outlook
    ... I guess you can configure multiple LDAP services, pointing to the same ADAM ... If I can somehow do the same thing using Outlook/ADAM, ...
    (microsoft.public.windows.server.active_directory)
Loading