Solved

How to crate/delete users in Active Directory using php?

Posted on 2010-09-15
8
346 Views
Last Modified: 2013-12-12
I have created a system for administrating users, that is based on mysql, and PHP. I need to conect to AD-and create and delete users, from the webpage? How can I do this.

I have tested out some php examples that connect to AD throug LDAP, and read out data. But i need somethinh that can write back.

Regards
Anders
0
Comment
Question by:andoman
8 Comments
 
LVL 5

Expert Comment

by:chqshaitan
ID: 33682264
hi,

there are various commandline utils that you can do this with. You didnt mention what version of ad you are running on so this may not be correct, but check out

ds add --> http://technet.microsoft.com/en-us/library/cc731279%28WS.10%29.aspx
0
 

Author Comment

by:andoman
ID: 33682455
Thanks, the link looks interresting.

But I`m running the AD on a Windows 2003-server. And I want to connect with php running on apache on linux.

So I`m looking for a tool that run commands on a linux-box, that connect to AD and do stuff.

Some other tip?
0
 
LVL 5

Accepted Solution

by:
chqshaitan earned 125 total points
ID: 33682610
ah from linux.. interesting :) nothing to stop you from enabling telnet on the windows server(except for the security concerns) and writing a script that will send the commands via telnet.

Or you could write a small php commandline app that runs on the windows domain controller, and checks a text file(database table) say on the linux box, and creates the associated user?
0
 
LVL 5

Expert Comment

by:chqshaitan
ID: 33682631
or you could look at linking linux and ad together.

have a read of the following :

http://technet.microsoft.com/en-us/magazine/2008.12.linux.aspx
0
How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

 
LVL 5

Expert Comment

by:sgdought
ID: 33917798
To do what you want, use an LDAP connection:

See this link for a examples and troubleshooting:
http://forums.devshed.com/ldap-programming-76/ldap-addition-of-users-in-php-from-shell-474487.html

0
 
LVL 4

Expert Comment

by:Antyrael
ID: 33947312
I made some php scripts to create and delete users in AD.
All the info I needed was available on php.net.
Check this site for more info: http://www.php.net/manual/en/ref.ldap.php

The commands you will mostly be interested in are:
ldap_add to create an AD object
ldap_mod_add to add the user to AD groups
ldap_delete to delete an AD object.

ldap_rename and ldap_modify can also be very useful.

Good luck.
0
 
LVL 27

Assisted Solution

by:Lukasz Chmielewski
Lukasz Chmielewski earned 125 total points
ID: 34759584
0
 

Author Closing Comment

by:andoman
ID: 34760073
Managed to do what I wanted with telnet, expect sripts, and PHP.

php, is calling an expectscript with a set of arguments that is pushed to the windows-server via telnet(unsecure, and unencrypted).

Used asadd, and dsrm, thats part of windows command line tool, to modify AD.

IMPORTANT:
Do not use this solution in any unsecure enviorment.!!
It is a much better solution som implement ldap-support.
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Deprecated and Headed for the Dustbin By now, you have probably heard that some PHP features, while convenient, can also cause PHP security problems.  This article discusses one of those, called register_globals.  It is a thing you do not want.  …
These days socially coordinated efforts have turned into a critical requirement for enterprises.
The viewer will learn how to create and use a small PHP class to apply a watermark to an image. This video shows the viewer the setup for the PHP watermark as well as important coding language. Continue to Part 2 to learn the core code used in creat…
In this fifth video of the Xpdf series, we discuss and demonstrate the PDFdetach utility, which is able to list and, more importantly, extract attachments that are embedded in PDF files. It does this via a command line interface, making it suitable …

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now