Something you need to be careful about is the way that anonymous binds are
handled. In LDAP v3, the definition of an anonymous bind is a little
ambiguous, and can lead to problems if someone uses a blank password.
Before using LDAP to authenticate, always ensure that your username and
password are not blank.
Kevin
>>> [EMAIL PROTECTED] 02/08/02 11:13AM >>>
Generally, you can't just request the username and password. That's kind
of
a security hole if you could. All you can do is attempt to authenticate.
Set up that LDAP directory in the advanced security in CF Administrator
and
use this code:
<cftry>
<cfauthenticate securitycontext="myDirectory"
username="#distinguishedName#"
password="#password#">
<cfcatch></cfcatch>
</cftry>
Where #distinguishedName# is the unique object like=
"cn=username, ou=orgUnit, o=org, dc=com"
As far as I remembered with Novell's LDAP, you start with the cannonical
name first and move to the larger parts to the right. You may want to
double check the order though.
-----Original Message-----
From: Burcham, Steve [mailto:[EMAIL PROTECTED]]
Sent: Friday, February 08, 2002 9:01 AM
To: CF-Talk
Subject: CFLDAP Help
How can I query my LDAP server for two values (Username and Password)? I
need to verify that the the values inserted into a form match what is in
Site Server and then continue processing the form.
______________________________________________________________________
Why Share?
Dedicated Win 2000 Server � PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
Instant Activation � $99/Month � Free Setup
http://www.pennyhost.com/redirect.cfm?adcode=coldfusionc
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
