Solved

LDAP information

Posted on 2011-03-14
6
928 Views
Last Modified: 2013-12-24
I need to find some LDAP information specifically ldap-login-dn, ldap-base-dn, ldap-naming-attribute, etc.  I wanted to know how I go about finding this information?  
0
Comment
Question by:HenryCastro
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 100 total points
ID: 35132435
Is this for AD or another LDAP directory?  If for AD you can look at the link below that will show you the names behind the GUI

http://www.selfadsi.org/user-attributes-w2k3.htm

Thanks

Mike
0
 

Author Comment

by:HenryCastro
ID: 35134262
Its for AD, windows 2003 domain. I will look at the link now, thank you.
0
 
LVL 6

Assisted Solution

by:jwilleke
jwilleke earned 400 total points
ID: 35136794
If you just want to see the LDAP "stuff" then you can use http://directory.apache.org/studio/ LDAP Browser.

You may need to find suitable login credentials to use with AD and often this is the hard part: http://ldapwiki.willeke.com/wiki/LDAP%20and%20Active%20Directory

-jim
0
Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

 

Author Comment

by:HenryCastro
ID: 35138666
To be even more specific my ISP is making a VPN connection with their ASA.  They are asking for:


ldap-login-dn
Specifies the name of the directory object that the system should bind as.

ldap-login-password
Specifies the password for the login DN.

ldap-base-dn
To specify the location in the LDAP hierarchy where the server should begin searching when it receives
an authorization request

ldap-naming-attribute
Specifies the Relative Distinguished Name attribute (or attributes) that
uniquely identifies an entry on the LDAP server.

Server-port
                Port number for communicating with the LDAP server

I appreciate all the input and advice.  Thanks for the responses.
0
 
LVL 6

Accepted Solution

by:
jwilleke earned 400 total points
ID: 35138813
ldap-login-dn
Specifies the name of the directory object that the system should bind as.
-> This will need to be the fully distinguished name of the user that they will use to find users.
The account will need to have rights to see what the applicaiton needs to return. This should probably be a read-only account and NOT ADMINISTRATOR.


ldap-login-password
Specifies the password for the login DN.
-> password for above

ldap-base-dn
To specify the location in the LDAP hierarchy where the server should begin searching when it receives
an authorization request
-> This is the distinguished name of the container where your users are, something like: CN=Users,DC=yourdomain,DC=com


ldap-naming-attribute
Specifies the Relative Distinguished Name attribute (or attributes) that
uniquely identifies an entry on the LDAP server.
-> if AD, this is probably CN

Server-port
                Port number for communicating with the LDAP server
->Should be 636 and LDAPS (or 389 and TLS) as otherwise, the password would be in clear text on the wire.

-jim
0
 

Author Closing Comment

by:HenryCastro
ID: 35139749
thank you for all the help.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Video by: Steve
Using examples as well as descriptions, step through each of the common simple join types, explaining differences in syntax, differences in expected outputs and showing how the queries run along with the actual outputs based upon a simple set of dem…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question