My first thought is yuck.

My second thought is this is insecure from multiple angles and really a poor
use of ADAM. 

Sounds like an ultra poor attempt at making a datacenter app work on the
road.

I like where Idan's was going... Some sort of local cached password for the
local version of the app. Once back online and talking to the "real" app the
cache gets refreshed. 




--
O'Reilly Active Directory Third Edition -
http://www.joeware.net/win/ad3e.htm 
 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray
Sent: Wednesday, October 04, 2006 10:34 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] ADAM on XP Pro

I've been talking to a vendor about an application they are developing.  It
involves running ADAM instances on XP Pro machines (laptops) that replicate
with a centralised ADAM instance running on W2K3.  I don't have further
details at this stage, but I believe the they are planning to use the local
ADAM instance to authenticate laptop users to an application when they are
off-line.

In addition to security concerns with this approach, I'm not really
comfortable with the idea of ADAM instances on laptops being part of a
configuration set.  I had always understool ADAM on XP to be used for a
personal data store
(http://technet2.microsoft.com/WindowsServer/en/library/29fb059e-544c-4577-b
f7c-ba4b08df48431033.mspx?mfr=true).

Any thoughts on this?

Tony 




________________________________________________________________
Sent via the WebMail system at mail.activedir.org


 
                   
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx

Reply via email to