Link to home
Start Free TrialLog in
Avatar of leop1212
leop1212Flag for United States of America

asked on

how to configure ADAM

I am trying to create a stand alone LDAP server apart from my AD
I've installed ADAM on win 2003 server
I've created unique instance and created an aplication directory partion
with CN=test,DC=mytest;DC=com
I then logged in and connected via ADAM ADSIEDIT to test loaded all tempalate but  I can't add a user
I do need second ldap server to for the third party app to contain users and password for user which do not have domain accounts
what should do I do wrong,
what is the correct way to confugure ADAM?
adamscr.jpg
newuser.jpg
Avatar of Justin Owens
Justin Owens
Flag of United States of America image

Would you mind clarifying your Question?  ADAM and AD LDS are read-only by nature.  If you need to add users, you have to do it through AD.  The way the Question is worded makes it seem like you are trying to add users through ADAM, which cannot be done.

Cheers,

DrUltima
Avatar of leop1212

ASKER

As I read in the help section of ADAM you can add users
http://technet.microsoft.com/en-us/library/cc778833(WS.10).aspx

However it doesn't work
all i am looking for is a simple LDAP server related to my current domain AD where a can add users with passwords ( I want to give my customers access to an application which requires LDAP authentication but do not want customers accounts associated with  my domain)
.
ADAM stands for "Active Directory Application Mode".  It is a copy of the AD LDAP directory.  Server 2008 more appropriately names this feature AD LDS (Active Directory Lightweight Directory Services).  When you add a user through ADAM as instructed by the link you provided in post http:#a35007188, you are creating an Active Directory user.  There is no such thing as an "ADAM Only" user, as far as I know, and that is what I was trying to (albeit poorly) explain in post http:#35001568.  As I understand it, the ADAM user, in this article, is referring to a user created through ADAM rather than ADUC (as opposed to a user which exists only in ADAM).  

Remember, the purpose for ADAM and AD LDS is to allow domain level authentication without actually communicating with a Domain Controller.  If you have an LDAP enabled application which is required for your customers, you should build a separate AD for them and either directly connect to it or use ADAM to connect to that separate AD.

DrUltima
well I don't won't separate AD i just need and LDAP server
ASKER CERTIFIED SOLUTION
Avatar of Justin Owens
Justin Owens
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
the complex part is how to confugre LDAP from scartch with no template or defults and I all I got was teh name  product which I arelady seen there are bunch of them available.

I've seen OPen Ldap and many others free Ldaps
http://directory.apache.org/studio/
and few others.