Ahh LDAP 3.0 - Serverless Binding - not sure what else implements this.<br><br>:)<br><br><div class="gmail_quote">On Thu, Jul 2, 2009 at 10:49 PM, Ben DeMott <span dir="ltr"><<a href="mailto:ben.demott@gmail.com">ben.demott@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Right, but how for example in Active Directory would you obtain this information without Authenticating?<br>
If you authenticate (BIND), you are using a UserPrincipalName which looks like me@mycompany.local - which means you already know my Distinguished Name or a combination of my samaaccountname and distinguished name (eek)<br>
So then isn't that defeating the purpose? or am I not aware of some manner to anonymously query Active Directory for its first DC ?<br><br>And I was referring to all of the account attributes that are proprietary when I said they would be different - if nothing else ya gotta give me that samaaccountname is proprietary and still needed.<div>
<div></div><div class="h5"><br>
<br><div class="gmail_quote">On Thu, Jul 2, 2009 at 10:38 PM, Adam Tauno Williams <span dir="ltr"><<a href="mailto:awilliam@whitemice.org" target="_blank">awilliam@whitemice.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div>>The biggest problem I've encountered with accessing Ldap Servers seeem to be Chicken and Egg<br>
issues.<br>
>Some ldap drivers require the domain you want to connect to. I don't want to connect to a<br>
Domain I want to connect to a Server -<br>
>And ask the server what domains it has present - this is different across most AD servers.<br>
</div><div>>(almost none of this would be the same across Microsoft, IBM, Novell, Sun,<br>
and other directory servers)<br>
<br>
</div>Actually it is, you need to perform the standard query for the rootDSE<br>
object by which the client can acquire this information.<br>
<div><div></div><div>_______________________________________________<br>
grlug mailing list<br>
<a href="mailto:grlug@grlug.org" target="_blank">grlug@grlug.org</a><br>
<a href="http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug" target="_blank">http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug</a><br>
</div></div></blockquote></div><br>
</div></div></blockquote></div><br>