Re: Active Directory?

On Sun, 2003-08-10 at 04:01, Brian Sammon wrote:
> Has anybody had any luck pointing Directory Administrator at a Windows 
> Active Directory LDAP server?
> I just tried and it didn't work for me, and I'm wondering if I should 
> spend time troubleshooting it, or if I'm barking up the wrong tree.

I'd say you are pretty much barking up the wrong tree (woof!)

Captive Directory uses LDAP attributes to describe users and groups in a
very different way to the POSIX attributes that Directory Administrator
uses.

For example the logon name for a user is sAMAccountName in AD and uid in
DA

A users password is unicodePwd in AD and userPassword in DA

Some attributes are common (mail, o, title) but the important ones are
very different.

I'd say DA might work if you ripped out the POSIX attributes and replace
them with AD ones in the source code and recompiled but it would be more
problems then it is worth. You'd have to include instructions for
Windows authentication, Access Control Lists etc

Cheers
-- 
Simon Morris
[email protected]

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GIT/ d- s: a- C+++ UL+++$> P+> L+++$> E--- W++ N+++ o+ K? w !O M !V 
!PS PE Y+ PGP++ t--- !5 X+ R- tv+++ b++ DI+@ D++ G> e h-- r+++ y+++ 
------END GEEK CODE BLOCK------

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQA/NnCxww7vdjjHclcRAh8rAJ0aa5hE5FJyb/Zw4OMwcmDbvkGkYACg6lRa
IkaaXd0YD8ZWwKsV7PbZFwE=
=IvMc
-----END PGP SIGNATURE-----