Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 405
  • Last Modified:

Application needs to lookup Active Directory info

Hi

We are running AD 2003. We have multiple domains within the same forest - emea.kam.com and apac.kam.com, forest root kam.com

We have an application that will need to query AD to lookup attributes of users, their group membership and other info.

What port does the app need to query the DC on - 386 (LDAP) or 3268 (GC)?
0
kam_uk
Asked:
kam_uk
  • 2
2 Solutions
 
Mike KlineCommented:
It depends on what type of groups and what the other info is.  Look at the last section here   http://technet.microsoft.com/en-us/library/cc978012.aspx

The GC only holds a partial set of attributes so while a GC in emea knows about every object it doesn't contain every attribute for every object.

Thanks

Mike
0
 
AwinishCommented:
Could you reveal the name of application,you are going to use in AD for performing ldap query.

The general attribute can be queried by most of the application using GC but if you want specific attribute, you require some set of programming/scripting to achieve that.

http://msdn.microsoft.com/en-us/library/ms675085%28VS.85%29.aspx

You will surely require 389 for ldap server & for secure 636(LDAP SSL)

Same for GC 3268 & 3269 for SSL.

It might require 53 for DNS server lookup.
 

0
 
AwinishCommented:
Check the below article its for windows 2000 but you will get an idea.

http://support.microsoft.com/kb/256938
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now