Re: Accessing LDAP to connect to ADAM instance

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Dmitri Gavrilov [MSFT] (dmitrig_at_online.microsoft.com)
Date: 02/13/04 

Date: Thu, 12 Feb 2004 16:00:23 -0800

You can create objects in ADAM and link them to AD users, using AD's user
objectGuid as a key to relate them.

Another option is to use bindProxies. They are described well in ADAM docs.

When you bind to ADAM as a windows user, you connect to ADAM's port (50000)
using secure bind mechanism (kerberos or ntlm or whatever else is available,
as long as it is not a simple bind), and pass windows user's credentials. No
need to talk to AD separately. ADAM forwards the auth request to the OS for
you. 

-- 
Dmitri Gavrilov
SDE, Active Directory Core
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"SRK" <anonymous@discussions.microsoft.com> wrote in message
news:98BE879D-A79A-4373-95EB-D2F0A0964E1E@microsoft.com...
> If I want to store User Roles in ADAM then how can I go about it?
>
> ADAM is running on Port 50000 and AD is running on 389. Do I have to
authenticate against AD and then again bind against ADAM? Also when you said
use a "secure bind/authentication type" does it mean I have to SSL or MD5
mechanism?
>
> Please pardon me for asking dumb questions and I greatly appreciate the
responses that I am getting.
>
> Thanks
>

Relevant Pages

  • Re: How Redirect ADAM to AD ?
    ... To use a simple bind, you must create bind proxy objects in ADAM for your AD ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... LDAP bind, then a bind proxy is what you want to create. ...
    (microsoft.public.windows.server.active_directory)
  • Re: adam bind-redirect
    ... could benefit from bind redirect/User Proxy Object ... The store for Azman will also be an ADAM. ... > They have there own SSO solution thats similar to forms authentication. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM Sign in Problem
    ... Are you trying to do simple bind with a Windows user? ... By default, ADAM can ... exist in the Adam Instance and ist not disabled. ... account is disabled due a password that does not conform to the ...
    (microsoft.public.windows.server.active_directory)
  • Re: How Redirect ADAM to AD ?
    ... If you wish to authenticate your users in AD against ADAM using a simple ... LDAP bind, then a bind proxy is what you want to create. ... In order to be able to authenticate my users with their account AD I ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM Proxy Bind re-direction
    ... I would just want to add that if you have added the Windows user to a group an FSP will be created which will represent the Windows user in the directory and you will see be able to use pass through auth. ... Pass-through auth is where you do a secure bind to ADAM with a Windows user's credentials to authenticate an Windows user. ... There are two main reasons to use bind proxy: ...
    (microsoft.public.windows.server.active_directory)