Re: How do I connect to active directory?



UPN = userPrincipalName. It is one of the key identifying attributes in AD
used for security. It is typically in the form of an email address like
user@xxxxxxxxxxx UPN is unique across the entire AD forest, not just in a
specific domain. UPN can also be used for binding, both with an LDAP simple
bind and a secure SASL bind, so it is very useful in that regard. Users
often log into Windows with their UPN (although some use the plain username,
sAMAccountName, combined with their domain name).

You might want to get a query tool for AD like LDP or ADFind (just LDAP
clients) so that you can search AD to see if there is an object with
userPrincipalName=xxxx. If you plan to do any AD programming at all in any
language/platform, having a query tool you can trust will save you a lot of
time. Note that you do usually have to bind to search AD, so you might get
caught in a chicken/egg thing there. One solution is to run the tool from a
Windows box logged in to the AD domain so that you can take advantage of the
Windows/LDAP feature that allows you to bind to the directory as the
currently logged in Windows user. You can basically "bootstrap" from that.

Otherwise, getting some help from your AD admins might be useful.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"tman" <tlozina@xxxxxxxxx> wrote in message
news:1160510024.801425.29960@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Joe Kaplan wrote:
The 525 in the extended error code corresponds to the error "the
specified
user does not exist". Are you sure your username is a valid UPN in AD?

Joe K.

I am not so sure, how can I verify?

The MyUsername/MyPassword I used is what I would use to log ont o the
Windows server hosting this Active Directory.

What is a UPN?



.



Relevant Pages

  • Re: UPN not required for users in the built-in User folder (AD) to log
    ... > principal name particularly on logging in from a windows xp pro ... I have got a test account in the built-in User ... > gets authenticated by just using the user account name (without the UPN ... > have UPN format in order to logon. ...
    (microsoft.public.windows.server.active_directory)
  • Re: UPN vs sAMAccountName
    ... Think of the UPN as a possible way of using shorthand for the domain name. ... easy to remember) so you log on with the username ... > One bad thing though was that we used the same value for Pre Windows ... > Server the management tools won't let you use the @ sign in the Pre> Windows 2000 logon name and we are in the process of renaming all> users before we upgrade our servers. ...
    (microsoft.public.windows.server.active_directory)
  • Thank you
    ... >we have one AD which has only one DC running windows 2000 Server Domain ... but the AD Domains and trusts object above it. ... You will see the UPN ...
    (microsoft.public.exchange.setup)
  • RE: Verifying E-Mail Addresses
    ... If you use Windows Server 2003, you can make the user's Universal ... Principal Name (UPN) suffix match the user's email domain name (which is ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has ...
    (Security-Basics)
  • UPN vs sAMAccountName
    ... One bad thing though was that we used the same value for Pre Windows 2000 ... logon name as in UPN - both with the @ sign. ... I know of ONE smart thing with the UPN: You can use it to logon without ... I'm also a bit baffeled by the names of the username options: ...
    (microsoft.public.windows.server.active_directory)