Re: ADAM / AD Proxy Bind

If you need to create a bunch of bind proxy objects, I'd suggest looking at
a tool like ADAMSync, as it can also keep those accounts in sync for you.
Usually, it is the ongoing "churn" in your main directory that becomes the
big problem. You could do a one-time population of the bind proxies using
an LDIF file, but you probably won't want to deal with the changes by hand.

I'd suggest starting a new topic on ADAM SSL in
microsoft.public.windows.server.active_directory. There are more ADAM
"infrastructure" guys who hang out there who can help. It sounds to me like
you might be installing a certificate without installing the private key
with it. If you are importing the certificate and aren't using a p12 or pfx
file, then that's likely the problem. However, please do start a new thread
to discuss it over there.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
<Rod Clingaman> wrote in message
news:e0BoIPJbHHA.588@xxxxxxxxxxxxxxxxxxxxxxx
I apologize for the delay, but I was not aware that a reply had existed.
Thanks Joe for the reply! First I will explain my situation: We have a
.Net app that will utilize ADAM. ADAM will bind to AD. Some of the users
we will add directly into ADAM. Other users will be bound from AD. The AD
may contain 50K users, and we want to bind maybe 1000 of them. In the MSFT
doco, they talk about administrating ADAM Proxy objects programmatically
using a tool that they supply called bindredirect.exe. However, I can not
find that application. In a nutshell, what I would like to accomplish is a
way that the admins can setup the proxy users more efficiently than by
doing them one-by-one as seen via the LDP app. Maybe I should investigate
the ADAMsync tool for this.

On another similar topic, "ADAM and SSL", I cannot believe the trouble I
am having to get this setup, especially since it seems like there's allot
of doco out there stating how others have had trouble, and they specified
what they have done to making the steps easier to understand. I have
still not succeeded with this. I complete all the steps and still get the
following error in LDP:

ld = ldap_sslinit("FICTIONWDA001.FIC.DEV", 50053, 1)
Error 0 = ldap_set_option(hLdap, LDAP_OPT_PROTOCOL_VERSION, 3)
Error 81 = ldap_connect(hLdap, NULL)
Server error: empty
Error 0x51: Fail to connect to FICTIONWDA001.FIC.DEV.

The other thing that puzzles me is that the MachineKeys directory that
gets mentioned in every article, never gets a new file when I install the
certificates. There are 6 old files in there with long hash names. The
server is 2003, and it also acts as a domain controller.

Any advice is greatly appreciated!


.

Relevant Pages

  • Re: Binding to ADAM with a Windows Account
    ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... To bind with a Windows account to ADAM, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Binding to ADAM with a Windows Account
    ... To bind with a Windows account to ADAM, ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)
  • Re: How Redirect ADAM to AD ?
    ... Bind just authenticates the user. ... ADAM using that user's security context. ... I do not know how you could use those with another LDAP directory. ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM Authentication
    ... network issues with secure authentication. ... If you can do a simple bind though, ... You might consider creating a fixed service account in ADAM with a password ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)
  • Re: How Redirect ADAM to AD ?
    ... To use a simple bind, you must create bind proxy objects in ADAM for your AD ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... LDAP bind, then a bind proxy is what you want to create. ...
    (microsoft.public.windows.server.active_directory)