Yup! The problem is in "jrun.security.NTAuth". If the string of group
names is too long then it doesn't return. I'm not sure what the
cut-off is.  MM is aware of the problem but they have yet to fix it
;-(

David Ross has a really cool CFC on his Blog that will handle nested
groups in AD via LDAP. You can find the info here:

http://www.d-ross.org/index.cfm?objectid=9C65EEF0-508B-E116-6F30CA79F5BFDE07

Also, if your going to tweak with Farcry security (and you are) then
you should consider changing the Security Package Path in "[your app
name]\config\_serverSpecificVars.cfm" so that it points to your App.
This allows you to extend/overwrite the core security methods without
making any core changes :)

HTH,

~tom

On Tue, 23 Nov 2004 08:49:24 +0800, Andrew Mercer <[EMAIL PROTECTED]> wrote:
> I have a client site that is using the COM that is packaged with
> farcry (ntAdmin.dll) to hook into Active Directory. For 300 users it
> is working fine, however, there are a handfull of users who have valid
> and active accounts that are getting 'false' returned from get user
> groups; where everyone else get a list of groups returned.
> 
> I have created a test script using CFLDAP and it is able to retrieve
> all the groups for the users in question.
> 
> Has anyone encountered this before?
> Any ideas of where to start looking?
> 
> Is there a CFLDAP solution out there that anyone is prepared to share
> with the community?
> 
> ---
> You are currently subscribed to farcry-dev as: [EMAIL PROTECTED]
> To unsubscribe send a blank email to [EMAIL PROTECTED]
> Aussie Macromedia Developers: http://lists.daemon.com.au/
>

---
You are currently subscribed to farcry-dev as: [email protected]
To unsubscribe send a blank email to [EMAIL PROTECTED]
Aussie Macromedia Developers: http://lists.daemon.com.au/

Reply via email to