Re: Oh.... I'm just wondering who's seen this stumper...

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Damn... I caught a failure audit. Per Joe's instructions, I filtered
the capture to tcp port 389, but there's nothing in the trace at the
same time as the failure audit or any clue of an error. The failure
again was on 3 attributes it does have write access to. It was
followed by another "write self" failure audit...

what happened to netmon.... it was running for an hour.... when I saw
the failure audit. I stopped and saved the capture.... all the capture
contained was data AFTER the failure....damn... how'd that happen



Joe Kaplan (MVP - ADSI) wrote:
Nope, not me. Popular name though. There's another Joe Kaplan at my
company and at least 10 more in my city's phone book (not a small city,
granted...).

I'm also not Joe Richards, although I too am the author on a book about AD.
Mine is really a programming book targeting .NET developers though.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Joe_SMS" <jw_nagy@xxxxxxxxxxx> wrote in message
news:1154370398.688339.73710@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
If I had his code...oh I wish.... I'm just now begging them to run it
so I can capture it... i'm setup. You guys will see it as soon as I
do. He's driving me whack. Joe... are you the Joe that works/worked
at the VA ? curious, names seems familiar.

Thanks

Joe Kaplan (MVP - ADSI) wrote:
It does with a simple bind. This is actually a requirement of the LDAP
V3
spec.

It won't work with a secure (SASL) bind. You can try this in LDP to see
how
it works.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services
Programming"
http://www.directoryprogramming.net
--
"Ace Fekay [MVP]" <PleaseAskMe@xxxxxxxxxxxxxx> wrote in message
news:OBs5i$EtGHA.4472@xxxxxxxxxxxxxxxxxxxxxxx
In news:uHDZKSosGHA.3832@xxxxxxxxxxxxxxxxxxxx,
Joe Richards [MVP] <humorexpress@xxxxxxxxxxx> stated, which I commented
on
below:
There won't be a requirement to auth with say the UPN as any of the
credential mechanisms will result in the same token, however, if say
for instance the userid is specified with a blank password they would
be authenticated as anonymous.

Thanks Joe. I didn't realize a blank password consitutes an anonymous
attempt.

Ace



.

Relevant Pages

  • Re: Oh.... Im just wondering whos seen this stumper...
    ... Joe Kaplan wrote: ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services ... at the time of the failure audit. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Oh.... Im just wondering whos seen this stumper...
    ... It is SASL bind GSS-API Encrypted payload packets. ... Joe Kaplan wrote: ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... at the time of the failure audit. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Oh.... Im just wondering whos seen this stumper...
    ... You can use the email for this message or get me at joe at my domain of joeware.net. ... Joe Richards Microsoft MVP Windows Server Directory Services ... at the time of the failure audit. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Oh.... Im just wondering whos seen this stumper...
    ... That would explain why you only see the bind traffic. ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... at the time of the failure audit. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain registration requirement in federated web sso with fore
    ... Thanks a lot Joe for this useful information. ... We have some applications, written in non microsoft languages like Java, ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... internet, then the DNS entries for the resources will need to be ...
    (microsoft.public.windows.server.active_directory)