Hi Michael,

Not sure about perl-ldap specifics, but you can provision AD accounts quite
easily over LDAP.  If you want to provision with a seeded password, this is
also possible, but it requires that you install the High Encryption Pack on
the AD server and that you connect to AD over SSL.  AD will only allow you
to add/modify the password over LDAP, it will not allow you to read it back
(makes sense).

Hope this helps,

Mike

-----Original Message-----
From: mflyger [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 29, 2003 10:35 AM
To: [EMAIL PROTECTED]
Subject: Active Directory, a bit off-topic


Hello:

We've recently gotten requests from groups using Active Directory (for a
small "workgroup") asking if they can authenticate some of their users
from our (centrally managed, more complete) openldap implementation.  I
have no idea (and apparently there isn't much out there on it yet).
 However, to keep this more on-topic, can perl-ldap be used to propagate
entries into AD?  I would have administrative access into their
system...  my suspicion this is nuts.

Any degree of information is appreciated, including simple "yes" or
"no".  I'm in the middle of reading lots of stuff.

Sincerely,
Michael


Reply via email to