Re: ADAM Binding

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Simple bind only works on ADAM security principals or bind proxy objects that point to Windows security principals. If you want to bind directly as a Windows user (local or domain), you must do a secure bind. In LDP, use the radio button for "bind with credentials" instead of simple bind.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
"eivkectisn" <eivkectisn@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:D6EFB260-9582-4226-8F4E-AEFAB51C14AD@xxxxxxxxxxxxxxxx
I misspoke and did not install the MUI version, I installed the English
version of ADAM.

Additionally I have removed the instance of ADAM and created a new instance
with no imports as part of the install. I then went into the ldp tool and
did a connect to my localhost port 389. I tried the bind with the local
Workstation ID I have created and did a "Simple Bind" the format I used was:

"MachineName\MachineUserid"
"password"

in the text boxes supllied in ldp.

The error I get back from ldp is:
0 = ldap_set_option(ld, LDAP_OPT_ENCRYPT, 0)
res = ldap_simple_bind_s(ld, 'MachineName\UserID', <unavailable>); // v.3
Error <49>: ldap_simple_bind_s() failed: Invalid Credentials
Server error: <empty>


I removed my real Machine Name and User ID from this posting. It seems to
have something to do with the local user ID I'm using. Again I am running a
standalone Windows XP workstation with a local ID.

Thanks.






"Lee Flight" wrote:

Hi

is there a step between 1 and 2 where you installed ADAMSP_SP1 or did
you just install the MUI pack?

Also the latest adamsetup.log in %windir%\Debug when the install is hanging
may give a clue.

Lee Flight

"eivkectisn" <eivkectisn@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:51C924E6-4FF9-4A94-AFEF-9BBC007D1AD0@xxxxxxxxxxxxxxxx
> 1. I am running Windows XP Professional SP3 on a standalone system > (not
> part of a Domain)
> 2. I have installed ADAMSP1MUI_x86.exe
> 3. I created an instance named Test and kept all the other defaults > for
> the screens prompted in the install process.
> 4. I selected the imports of all but AZMan as part of the install
> process.
> 5. The installs runs and displays that it is Starting the Service, it
> then
> hangs.
> 6. I go over to my Services and see that the Test Serrvice is now > there
> and Running.
> 7. I Stop the service and the installation of the Instance prompts > for a
> User ID and password. I defaulted to the User ID that I have logged on > as
> in
> the instance creation prompts.
> 8. I enter a valid Workstation ID/Password in the prompt and I keep
> getting that the credentials are invalid and will not progress and > import
> the
> .ldf files into the instance.
> 9. I then cancel the install and restart the service and none of the
> tools
> (adam-adsiedit, ldifde, etc.) or the ability to write a .Net > application
> (using a DirectoryEntry object) will bind to the Instance and they > never
> return, they just hang, just like the instance creation import. Even > if I
> do
> not import any .ldf files as part of instancance creation, I can never
> bind
> to the instance with the tools or an application, it just hangs.
>
>
> Any Ideas or what I am doing wrong would be greatly appreciated.
>
> Thanks!
>




.



Relevant Pages

  • Re: Update schema in ADAM from aremote machine
    ... The easiest solution is to use secure bind and bind as a windows principal ... If you create an ADAM user in config partition, and add him to config admins ...
    (microsoft.public.windows.server.active_directory)
  • Re: Creating User Proxy in ADAM
    ... You can bind to ADAM as a windows user, you don't need a proxy for that. ... If you do need a proxy, ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM Ldapsearch using Windows Domain Account
    ... you can create a bind proxy object to enable ... I just installed ADAM with the purpose of using it as a directory ... I have an ADAM user account that I provisioned that can ... The problem I have is when I try to use a Windows Domain account from the ...
    (microsoft.public.windows.server.active_directory)
  • Re: adam bind-redirect
    ... a third party doing authentication) then the proxy-redirect isnt an option. ... could benefit from bind redirect/User Proxy Object ... >> Our Adam will have a user store where we put custom user attributes. ... > Integrated authentication gives you a Windows security context ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM & SASL Bind for Windows Security Principals
    ... There are really three bind authentication things you can do with ADAM: ... - Use simple bind to authenticate an ADAM user ... Use simple bind to authenticate Windows user who is configured as a bind ...
    (microsoft.public.windows.server.active_directory)