Binding to ADAM as Authenticated User

Folks,

This question is probably creeping out of the strictly ADAM/AD
category, but I'm hoping maybe someone here can help out with it.

Basically, we're using the JNDI_Realm under Tomcat to get our user
authorizations for some webapps we're developing in Java. Among these
is a self-service JSP where a user can can change his password.

Works like this: The user requests the page, Tomcat challenges for
username/password, then does an anonymous bind to ADAM to check
authorization. If the user is authorized, the page comes up.

The problem is, once the user provides a new password, we don't know
how to bind back to ADAM as that user to actually change the password.
We have the name, of course, but the password is not available to us.
Does anyone know, is there a token, SID or some such available in the
session that can be used to perform the bind and make the change? This
seems like such a straightforward thing to want to do, I'm having
trouble believing it's been this hard to figure out, so far.

Many thanks,

Lincoln

.

Relevant Pages

  • Re: How Redirect ADAM to AD ?
    ... To use a simple bind, you must create bind proxy objects in ADAM for your AD ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... LDAP bind, then a bind proxy is what you want to create. ...
    (microsoft.public.windows.server.active_directory)
  • Re: adam bind-redirect
    ... could benefit from bind redirect/User Proxy Object ... The store for Azman will also be an ADAM. ... > They have there own SSO solution thats similar to forms authentication. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM Sign in Problem
    ... Are you trying to do simple bind with a Windows user? ... By default, ADAM can ... exist in the Adam Instance and ist not disabled. ... account is disabled due a password that does not conform to the ...
    (microsoft.public.windows.server.active_directory)
  • Re: How Redirect ADAM to AD ?
    ... If you wish to authenticate your users in AD against ADAM using a simple ... LDAP bind, then a bind proxy is what you want to create. ... In order to be able to authenticate my users with their account AD I ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM Proxy Bind re-direction
    ... There are two features in ADAM that allow you to authenticate AD users: ... Bind proxy ... Windows user's credentials to authenticate an Windows ... There are two main reasons to use bind proxy: ...
    (microsoft.public.windows.server.active_directory)