RE: [ActiveDir] Anonymous bind

[Mulnick, Al]

OGo?  www.opengroupware.org.  It's an open groupware suite (like Office/BackOffice only not).  It's a descendant of SKYRiX IIRC.  A lot like SUSE's OpenExchange. From their website:   A: SuSE OpenExchange is actually two things: an OpenSource messaging server based on Cyrus and OpenLDAP and a closed source, proprietary web groupware server (ComFire). OGo is very similiar to the groupware server part (German users can check the Linux Magazin article on that) and indeed you can install OGo as the groupware component on an OpenExchange server to save the ComFire license costs and use a solution wholly composed of OpenSource software.   I've been a member of the mailing list for a while now, but not overly impressed by the list.  Low traffic and I'm not thrilled with the directions they're headed.  Whatever, it's not bad.  I think what Aitzol really wants to do is not do a simple bind.  You want an authenticated bind instead against Active Directory.  Could be wrong about that.   Al    From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Tuesday, May 18, 2004 9:37 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Anonymous bind Ah. Interesting, so it sounds like they want to compare the hashes instead of actually use the authentication of the system. Well since it is OpenSource, that should be easy to rewrite and correct huh. :o)   You can open up the anonymous search but if they need to see the password, you are dead in the water right there. You either can't use AD, can't use that product, or you need to modify the authentication routines.   I have never heard of that product, is it *nix only or do they have Win32 ports?      joe     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aitzol Naberan Burga�a Sent: Tuesday, May 18, 2004 9:21 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Anonymous bind I'm trying to authentificate OpenGroupware (open source groupware suite) against Active Directory. The problem is that OpenGroupware's authentification method is a litle bit curious:  It tries to do an anonymous bind to the ldap server before it will try to bind as the user name supplied at the login prompt.  Active Directory will allow an anonymous bind, so that part is successful, but it does not allow an anonymous search. I'm not sure where authentification fails, because I have read thet OpenGroupware search a password and when doesn't find it fails. -- Aitzol Naberan Burga�a CodeSyntax [EMAIL PROTECTED] www.codesyntax.com Tel: 943  82 17 80 joe(e)k dio: Correct.   Aitzol, what problem are you trying to solve?     joe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Brent Westmoreland Sent: Tuesday, May 18, 2004 8:41 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Anonymous bind I know that the unicodePwd attributes can never be read by way of ldap, you will probably find that this is true for userPassword also. http://support.microsoft.com/default.aspx?scid=kb;EN-US;269190 On May 18, 2004, at 6:29 AM, Aitzol Naberan Burga�a wrote: Hi all How can I grant "read" access to userPasswor attribute? Thanks -- Aitzol Naberan Burga�a CodeSyntax [EMAIL PROTECTED] www.codesyntax.com Tel: 943  82 17 80 List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/