Re: Integration issues...

ADAM won't really help much with two untrusted domains unless something like
MIIS is used to sync the passwords from both domains into ADAM. ADAM has
the ability to authenticate users in AD via passthrough and bind proxy auth,
but you could only do one domain at a time this way.

If the OP has the ability to control the code that is doing the LDAP auth,
the poor man's solution would be to try LDAP auth against the first domain
and then try the second one. I've seen a few apps that handle things this
way. ADFS actually uses a mechanism like this to support both AD and ADAM
user stores.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Paul Williams [MVP]" <ptw2001@xxxxxxxxxxx> wrote in message
news:%23$vLiZ8xGHA.2396@xxxxxxxxxxxxxxxxxxxxxxx
Can you expand on your requirements? Do you want to have these
applications interoperate with both AD domains? I can't see what you want
to do, or how ADAM will help, unless you wish to synchronise two
directories into one unified view to present to the application.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net





.

Relevant Pages

  • Re: AD Schema Extension Question
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... The ADAM instances could be ...
    (microsoft.public.windows.server.active_directory)
  • Re: Setting Empty Property Values in ADAM
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... The ADAM schema was a copy of AD, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Changing ADAM user password
    ... It might actually be possible to encrypt the pwd operation using a Digest ... My understanding is that ADSI only tries an LDAP pwd mod operation using SSL ... I would like to see ADSI do some stuff to make these operations in ADAM less ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)
  • Re: Changing ADAM user password
    ... configuration tweaks that need to be done before ADAM is usable. ... Joe Kaplan wrote: ... Co-author of "The .NET Developer's Guide to Directory Services ... DirectoryEntry changeEntry = new DirectoryEntry(ldapPath, userID, ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM account store in ADFS
    ... The most important consideration with a token-based app is how you will ... ADFS has two options, "shadow ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... To add the app pool identity to the readers role in ADAM, ...
    (microsoft.public.windows.server.active_directory)
Loading