 |
US $5.00
boxes exp
Authentication Against Active Directory and Edirectory Via Ldap
Figure 1.0 - This is the main window where users login.
Introduction
This article covers HOW-TO authenticate against Microsoft Active Directory and Novell Edirectory via LDAP.
Background
It is not easy to find an article that talks about how to authenticate users against both MS Active Directory and Novell Edirectory via LDAP. In short, LDAP stands for Lightweight Directory Access Protocol. It is a subset of Directory Access Protocol or DAP. University of Michigan developed it because DAP took up a lot of resources. Anyways, this article goes through all of the necessary steps to start authenticating users against both directory services.
Functionality Supported
- Authentication against MS Active Directory
- Authentication against Novell E-Directory
Requirements
- A Server running Active Directory
- A Server running Edirectory
- Familiarity with LDAP and how entities are addressed
Optional Tool
- Adsvw.exe by Microsoft - This utility allows user to browse LDAP directory. It comes as part of ADSI SDK or as part of support tools in advanced server. It is very helpful when users are trying to find how entities should be referenced. Here is a little tip. If the user was to use it to browse active directory, then make sure Secure Connection is checked. When it comes to Edirectory the check should be on Use Encryp option.
Using the code
First, add a reference to System.DirectoryServices by going to Project -> Add Reference. When this is done the dialog box as shown by figure 2.0 should display. Under .NET tab click on System.DirectoryServices.dll and click Select. Then click on OK to get back to the project.
Figure 2.0 - This is the dialog where user selects the reference.
In this solution, there is a class namely Authenticate. It is contained inside the file called Authenticate.cs. You should add it to your project or copy and paste the class from The Code section. Create a new instance of Authenticate and assign it to aAuthent. Several values needed to be initialized before doing the actual login.
Collapse Authenticate aAuthent = new Authenticate();
I'll be referring to various widgets from this point. There are 3 text edit and 2 radio button widgets you need to worry about. Please map the direction appropriately in your workspace. Set the Domain name to the value held by txtDomain widget by invoking SetDomain. This is where user entered IP address (i.e. 10.x.x.x) or host name (i.e. mydomain.com) of the target server. Note, that all but one Set/Modifier methods in this class returns boolean. It just indicates whether it modified the variable successfully or not. This may be against the convention, but, checking the argument inside the function was much more favorable to me instead of duplicating the effort elsewhere.
Collapse if (!(aAuthent.SetDomain(this.txtDomain.Text)))
{
// error message here
}
Then, invoke SetUser function to take in the value of text widget txtUser. This is where user name is supplied.
Collapse if (!(aAuthent.SetUser(this.txtUser.Text)))
{
// error message here
}
After that, call SetPass function to pass the value of txtPassword. This is where user password is supplied.
Collapse if (!(aAuthent.SetPass(this.txtPassword.Text)))
{
// error message here
}
Next, check which directory this user desires to authenticate against. In this solution, there are two radio buttons namely rbtnED and rbtnAD. If the former is checked then invoke SetAuthenticationType with the argument set to true. This will tell the Authenticate class to use Secure Socket Layer or SSL. Edirectory uses ssl protocol to perform authentication task. In the latter case, the boolean value false would instruct the class to use Secure. Active Directory utilizes the secure method. The internal of those communication protocols or methods are outside the scope of this article. Therefore, I will skip them.
Collapse if (this.rbtnED.Checked)
aAuthent.SetAuthenticationType(true);r>
else if (this.rbtnAD.Checked)
aAuthent.SetAuthenticationType(false);
Finally, the Login function inside this class should be invoked. It handles everything from this point. On success, it will welcome the user; other wise display failure message.
Collapse aAuthent.Login();
The Code
Collapse
/// <summary>
/// This class performs user authentication against Active Directory and
/// Novell Edirectory.
/// </summary>
public class Authenticate
{
/// <summary>
/// string specifying user name
/// </summary>
private string strUser;
/// <summary>
/// string specifying user password
/// </summary>
private string strPass;
/// <summary>
/// string specifying user domain
/// </summary>
private string strDomain;
/// <summary>
/// AuthenticationTypes specifying the security
/// protocol to use, i.e. Secure, SSL
/// </summary>
private AuthenticationTypes atAuthentType;
/// <summary>
/// default constructor
/// </summary>
public Authenticate()
{
}
/// <summary>
/// function that sets the domain name
/// </summary>
/// <param name="strValue"></param>
/// <returns>It returns true, if user passed
/// something; otherwise, false </returns>
public bool SetDomain(string strValue)
{
if (strValue.Length <= 0)
return false;
this.strDomain = "LDAP://" + strValue;
return true;
}
/// <summary>
/// function that sets user name
/// </summary>
/// <param name="strValue"></param>
/// <returns>It returns true, if user passed
/// something; otherwise, false </returns>
public bool SetUser(string strValue)
{
if (strValue.Length <= 0)
return false;
this.strUser = strValue;
return true;
}
/// <summary>
/// function that sets user password
/// </summary>
/// <param name="strValue"></param>
/// <returns>It returns true, if user passed
/// something; otherwise, false </returns>
public bool SetPass(string strValue)
{
if (strValue.Length <= 0)
return false;
this.strPass = strValue;
return true;
}
/// <summary>
/// function that sets user authentication type
/// </summary>
/// <param name="bValue"></param>
public void SetAuthenticationType(bool bValue)
{
// set ssl to true if true is found
if (bValue)
atAuthentType = AuthenticationTypes.SecureSocketsLayer;
// otherwise set it to secure
else
atAuthentType = AuthenticationTypes.Secure;
}
/// <summary>
/// function that performs login task
/// and welcomes user if they are verified
/// </summary>
public void Login()
{
// now create the directory entry to establish connection
using(DirectoryEntry deDirEntry = new DirectoryEntry(this.strDomain,
this.strUser,
this.strPass,
this.atAuthentType))
{
// if user is verified then it will welcome them
try
{
MessageBox.Show("Welcome to '" + deDirEntry.Name + "'");
// TODO: add your specific tasks here
}
catch (Exception exp)
{
MessageBox.Show("Sorry, unable to verify your information");
}
}
}
}
Points of Interest
One thing that was problematic was the way addressing worked. In Active Directory, users are allowed to pass in their name without utilizing the distinguished name format. If they were to try the same trick against Edirectory then it would fail right away.
HOW-TO use this Demo
Authenticating against Edirectory
First, enter the user name. This is something the user needs to find out before proceeding with the next step. Use the ADSVW utility that was recommended to find out how the current user should be addressed. In this example, cn=userA,ou=rajibOU,o=rajibContext means there is an individual named userA belonging to organization unit rajibOU attempting to log in to the resources under rajibContext.
Figure 3.0 - User enters the distinguished name.
Second, enter the password for this particular user.
Figure 3.1 - User enters the password.
Third, enter the domain name or IP address that is applicable.
Figure 3.2 - User enters the IP address of the target server.
Fourth, choose either Active Directory or Edirectory.
Figure 3.2 - User selects the directory service.
Finally, click Login and it should produce the output as shown in figure 3.4.
Figure 3.4 - Show the outcome of user login attempt.
Authenticating against Active Directory
First, enter the user name.
Figure 3.5 - User enters the distinguished name.
Second, enter the password for this particular user.
Figure 3.6 - User enters the password.
Third, enter the domain name or IP address that is applicable.
Figure 3.7 - User enters the IP address of the target server.
Fourth, choose Active Directory.
Figure 3.8 - User selects the directory service.
Finally, click Login and it should produce the output as shown in figure 3.9.
Figure 3.9 - Shows the outcome of user login attempt.
About the Author
My personal/quasi-work blog:
http://www.rajib-bahar.com
Work related:
http://www.icdotnet.com
http://www.icsql.com
YouTube Vlogs:
http://www.youtube.com/icsql - sql tutorials in video
http://www.youtube.com/rajib2k5 - my random vlog on art and other stuff outside of the geek world...
anyone with mechanic exp please answer?
i have a nut that lossens right above the where the exuast comes out of the engine its on a copper pipe and comes off and makes my truck sound like its rattles when i rev it up.does any one know what that is.........second question...i think its a fusible link..i have a wire that was pulled out and its hard to connect it back in the black boxes . will it mess anything up hooking it straight to the battery. its a green and red wire...........half of this probely doesent make sense cause i have no clue about most of this but i dont have alot of money to bring it to a mech........thanks
its a 97 nissian pickup truck
the wire comes from a black box on the red terminal when its off my truck will shut off no and my check engine light stays on
ive tried to connect it but it always comes back loose
Stop by Autozone (or any parts store) and buy a small tube of 'Lock-Tite'. smear a small amount of the goo onto the stud and re-tighten the nut. It should stay put. Try not to re-engineer any electrical wiring on your car. These systems are so delicate nowdays you could smoke your computers if you created a surge in the lines trying to re-route the wiring. Take your time and try to see if the wire can be reconnected solidly (remove the link and inspect it if you have to).
"SPIRIT RESCUE" A Ghost Box Experience
 |
Bialetti 3 Cup Moka Express Coffee Gift Set, Service for 4 Sale Price: $34.45  |
|
The Moka Express is the original stove top espresso maker from Bialetti, created in 1933. Most Italian natives agree that stove-top preparation makes the most delicious espresso. The aluminum pot features the distinctive eight-sided shape that diffuses heat perfectly to enhance the aroma of your coffee... |
 |
Japanese Sushi Tray Set for Two with Chopsticks, Sepia Gingko Sale Price: $29.95 |
|
Perfect not only for sushi, but artful salads and side dishes as well. These Japanese stoneware pieces make a wonderfully versatile addition to any kitchen pantry. |
 |
Quaker Chewy Granola Bar Reduced Sugar Cookies N Cream, 8-Count Boxes (Pack of 12) List Price: $35.97 Sale Price: $25.18 |
|
Quaker Chewy Granola Bar Reduced Sugar is a chewy bar that is made from 25% less sugar that the normal quaker granola bars. They are a great-tasting and wholesome snack for everyone.They are a good source of calcium and has 0gm trans fat. |
 |
Benefiber Fiber Drink Mix Raspberry Tea Flavor 8 Packets per Box (2 Pack) EXP Date 08/2012 Sale Price: $5.99 |
 |
The Dark Side Of The Moon - Experience Version List Price: $29.99 Sale Price: $16.78 Used From: $16.91 |
|
1. Speak to Me2. Breathe3. On the Run4. Time5. The Great Gig in the Sky6. Money7. Us and Them8. Any Colour You Like9. Brain Damage10. Eclipse11. Speak to Me (Live)12. Breathe (Live)13. On the Run (Live)14... |
 |
British Steel (Exp) List Price: $7.99 Sale Price: $4.37 Used From: $4.19 |
|
The guitar riff from "Breaking the Law" is one of the most recognizable from early 1980s heavy metal. Though British Steel sounds dated these days, it's also a classic slice of metal, one of the best from a band that defined the genre in the late '70s and early '80s... |
 |
The Gold Experience List Price: $16.98 Sale Price: $33.99 Used From: $8.13 |
|
Available again after being deleted for years! Originally re lesed in 1995. 12 tracks including 'The Most Beautiful Girl In The World'. |
 |
DEWALT DW716 15 Amp 12-Inch Double-Bevel Compound Miter Saw List Price: $724.59 Sale Price: Too low to display Used From: $300.95 |
|
Whether you're cutting baseboards or crown molding, the DEWALT 12-Inch Double-Bevel Compound Miter Saw provides quick, accurate cuts to complete the job. Thanks to a powerful 15 Amp motor, an easy-to-adjust cam-lock miter handle, convenient miter and bevel stops, and a tall fence for oversized decorative moldings, this compound miter saw is ready for a range of crosscutting and miter-cutting applications... |
 |
MK-370EXP 1-1/4 HP 7-Inch Wet Cutting Tile Saw List Price: $389.00 Sale Price: $448.86 Used From: $250.00 |
|
Tile Saw with Stand features 7-inch portable wet-cutting tile saw with 18-inch rip, 13-inch diagonal, and 2-inch depth of cut1-1/4-horsepower engine for high torque (6,000 RPM) and power. Durable design--thermoplastic water reservoir; zinc-plated steel frame. |
|
|
Exp / Exp Letter/Legal Box EXP30020 10x12x15in Cardboard Economy Document Storage Boxes w/650lb Stacking Weight & Lid - 12-Pack / EXP30020-12PK $22.57 Exp - Exp Letter/Legal Box EXP30020 10x12x15in Cardboard Economy Document Storage Boxes w/650lb Stacking Weight & Lid - 12-Pack - EXP30020-12PK |
|
|
Boxes $14.99 Boxes |
|
|
Exp $20.4 A master at work -- that's the best way to sum up the music on Exp. Here, electro-glitch master Frank Bretschneider clicks and cuts his way through 35 itsy-bitsy pieces (none over three minutes, many under one). Each one is a careful work of quasi-beat la |
|
|
SLIM KYBD EXP PACK $71.99 SLIM KYBD EXP PACK |
|
|
Jacket,2" Exp, Ltr,Be $28.99 JACKET,2" EXP, LTR,BE |
|
|
Jacket,2" Exp, Ltr,Yel $28.99 JACKET,2" EXP, LTR,YEL |
|
|
Pocket,3.5"Exp,Lgl,Brn $34.99 POCKET,3.5"EXP,LGL,BR |
|
|
Wallet,Ltr,5-1/4" Exp,Rd $3.99 WALLET,LTR,5-1/4" EXP,RD |
|
|
Pocket,File,1.75"Exp,Bn $38.99 POCKET,FILE,1.75"EXP,BN |
|
|
Pocket,File,5.25"Exp,Bn $21.99 POCKET,FILE,5.25"EXP,BN |
|
|
Wallet,Lgl,5-1/4" Exp,Rd $3.99 WALLET,LGL,5-1/4" EXP,RD |
|
|
Pocket,File,3.5"Exp,Bn $44.99 POCKET,FILE,3.5"EXP,BN |
|
|
Jacket,2" Exp, Ltr,Rd $28.99 JACKET,2" EXP, LTR,RD |
|
|
Exp 165 - Frame Squeegee Lh $36 [EXP 165] UPC: 86606960 |
|
|
The Boxes $5.21 Before leaving on his next journey, Uncle Marco instructs his niece, Annie, to not open the boxes he has left behind, yet when curiosity gets the best of her and she does, the results are disastrous as time-warping mutants are set free. Reprint. |
|
|
Printek / Premiertek EXP-USB Riser Card / EXP-USB $28.32 Printek - Premiertek EXP-USB Riser Card - EXP-USB |
|
|
ECLECTIC GOLDENSEAL 90VCAPS EXP - 10/10 $22.6 ECLECTIC GOLDENSEAL 90VCAPS EXP - 10/10 |
|
|
Enymedica Reduce 30CAPS EXP - 10/10 $20.98 Enymedica Reduce 30CAPS EXP - 10/10 |