Re: Changing Passwords Via DSML



It is hard for me to imagine how it can be faster than doing pure LDAP since
the DSML gateway is essentially a translator between LDAP operations and
SOAP messages. It would have to be faster to skip the middle man and do
LDAP directly. :) What do you find it to be faster than?

Still, I'm definitely glad you find it useful. The main reason I asked
about programmability is that historically, DSML has been difficult to
program directly because it did not include a WSDL file and thus creating a
client proxy for it was quite difficult and required a lot of hand crafting
of SOAP messages. .NET 2.0 added a nice abstraction layer there which makes
most of the pain go away, so I was wondering if you were using that to do
the actual DSML work. It sounds like you have another system for that.

Joe K.
--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"jskalicky" <jskalicky@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BA1DF185-A6DE-4B0B-9269-CDDD051912BB@xxxxxxxxxxxxxxxx
Joe,

We are using a Java web service to interact with our DSML gateway. We know
about the built in DSML functionality in .net as well. DSML also is much
faster at retrieving info from the Directory Server. We also like th efact
that the DSML is running in IIS which is very robust.

"jskalicky" wrote:

We have our DSML gateway set up to change AD passwords via dsml altering
the
uniCodePwd attribute. Will changing the password in this way trigger
password
replication in the domain the same as changing it via AD users and
computers?
Please advise...


.



Relevant Pages

  • Re: Setting Passwords via DSML with non-admin type Domain User Cre
    ... I think we are confusing terms now. ... There are three different types of LDAP attribute modifications: ... how to find out since I have no DSML directory to play with. ... normal users have rights to change their own password but ...
    (microsoft.public.platformsdk.security)
  • Re: Setting Passwords via DSML with non-admin type Domain User Credent
    ... It isn't easy finding any help for DSML as it is not very well used. ... If you try to do a set password (just an LDAP replace), ... > When I execute the DSML request to change the password as Admin, ... > using Perl scripts: ...
    (microsoft.public.platformsdk.security)
  • Re: Setting Passwords via DSML with non-admin type Domain User Cre
    ... Therefore the unicodePwd field is being modified. ... Here is the batch request (in DSML) which works under administrator ... > If you try to do a set password (just an LDAP replace), ...
    (microsoft.public.platformsdk.security)
  • Re: Changing Passwords Via DSML
    ... We are using the MS implementation of DSML. ... interacting with AD and ADAM via web services. ... "Joe Kaplan" wrote: ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)
  • Re: Changing Passwords Via DSML
    ... Do you use the DSML support in .NET Framework ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)