Re: Proxy object in ADAM

Hi

are you using a secure channel for the proxy bind? ADAM requires
this by default for bindProxies? See p.55 of the ADAM Reviewer's
Guide in the docs folder of directory where you unpacked ADAM.

If that's not the issue please post the extended error message from the
results pane of the ldp.exe bind attempt. Also check the security event
logs on the ADAM server and the domain DCs. To check that the domain
account is OK you could try binding the ADAM instance using ldp.exe
and specify a secure bind using the domain account.

Lee Flight

"Chang" <mchang92612@xxxxxxxxx> wrote in message
news:OVjfh2CRFHA.3704@xxxxxxxxxxxxxxxxxxxxxxx
> This is my own LDAP test program. I use this test program to bind as
> regular ADAM users and it works fine. Then I tried to test proxy user
> object.
>
> Yes, I did simple bind to my proxy user object using the full DN of the
> proxy user in my ADAM instance with the password of the proxied object on
> my
> Windows domain. According to the documentation: When a user attempts to
> bind to a proxy object, ADAM takes the SID that is stored in the proxy
> object, together with the password that is supplied at bind time, and
> presents the SID and the password to Active Diectory for authentication.
>
> How can I tell where the bind error came from - ADAM or AD? Do I need to
> do
> anything to allow SID/password bind to the AD?
>
> BTW, I also tried ldp program and also got the same error.
>
> Thanks.
>
>
> "Lee Flight" <lef@xxxxxxxxxxxxxxx> wrote in message
> news:Pine.LNX.4.44.0504160334060.10193-100000@xxxxxxxxxxxxxxxxxx
>>
>> Hi
>> you do not say what application you are using to test the simple bind.
>> In the simple bind did you specify the full distinguished name of the
>> userproxy in the ADAM instance in the bind credentials?
>>
>>
>> Lee Flight
>>
>> On Fri, 15 Apr 2005, Chang wrote:
>>
>> >
>> > I have a Windows 2003 (SP1) ADAM server. This server joins a Windows
> 2000
>> > (SP4) domain.
>> >
>> > I imported the ms-userproxy.ldf file while I installed my ADAM
>> > instance.
> I
>> > created a user by selecting "userProxy" class and enter a SID of a
> Windows
>> > user - I copied the SID value (0x01 0x05 ...) from my ADSI editor of my
>> > Windows AD to the create user dialog.
>> >
>> > Then I tried a LDAP simple bind to this proxy object with the Windows
> user's
>> > password. I expect the bind would be redirected to AD. But I always
> got
>> > error 49 [Invalid Credentials]. Is there anything missing in my setup?
>> >
>> > BTW, I tried to search if there are discussions of proxy object in this
> news
>> > group. But even I tried to search all messages after 1/1/2004 I can
> only
>> > get messages sent in the last few days. How do I fix this problem?
>> >
>> > Thanks in advance!!
>> >
>> >
>> >
>>
>
>


.

Relevant Pages

  • Re: Creating User Proxy in ADAM
    ... You can bind to ADAM as a windows user, you don't need a proxy for that. ... If you do need a proxy, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Proxy object in ADAM
    ... It does have something to do with the secure channel. ... See p.55 of the ADAM Reviewer's ... > results pane of the ldp.exe bind attempt. ... Then I tried to test proxy user ...
    (microsoft.public.windows.server.active_directory)
  • Re: How Redirect ADAM to AD ?
    ... To use a simple bind, you must create bind proxy objects in ADAM for your AD ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... LDAP bind, then a bind proxy is what you want to create. ...
    (microsoft.public.windows.server.active_directory)
  • Re: adam bind-redirect
    ... Lee is correct. ... you are better off doing a secure bind as the currently ... This will work only if ADAM ... ADAM only cares about msDS-bindProxy being an aux class of your proxy class. ...
    (microsoft.public.windows.server.active_directory)
  • Re: adam bind-redirect
    ... could benefit from bind redirect/User Proxy Object ... The store for Azman will also be an ADAM. ... > They have there own SSO solution thats similar to forms authentication. ...
    (microsoft.public.windows.server.active_directory)