joeware - never stop exploring... :)

1. Determine if your application has been configured to use a specific named Domain Controller, if so use it.     a. For debugging purposes only     b. Application specific (where do you keep your configuration info?) 2. Determine if your application has been configured to use a specific named Site at startup, if so do […]

1. Determine if your application has been configured to use a specific named Domain Controller, use it.     a. For debugging purposes only     b. Application specific (where do you keep your configuration info?) 2. Determine if your application has been configured to use a specific named Site at startup, do not Autodiscover site.     […]

0. This does not follow the previously mentioned high level steps, this method is “I hand my problem over to Microsoft to figure out on my behalf”. 1. Call ldap_sslinit specifying domain name or forest name (for Global Catalog)     a. LDAP port         i. LDAP* pLdap=ldap_sslinit(L"domain.forestroot.com", LDAP_PORT, false);     b. LDAPS (SSL) port         […]

0. If you are on Windows use the Windows LDAP Library and let it handle all of this for you. 1. Determine if your application has been configured to use a specific named Domain Controller, use it.     a. For debugging purposes only 2. Determine if your application has been configured (hardcoded) to use a […]

Active Directory location capability is all based on open standards based DNS SRV records which are designed to offer location capability for ANY services. The DNS SRV record RFC is RFC2782 which you can find at https://www.ietf.org/rfc/rfc2782.txt. There are two main components of the SRV process for domain controllers; registration and lookup. First the domain […]

While working on some posts about writing code for leveraging Active Directory I realized that a very weak point I have run into with many (perhaps most) apps is the logging, particularly for use in troubleshooting and/or debugging of issues. I don’t care how good of a coder you are (or think you are), your […]

I previously wrote that many applications that are using Active Directory aren’t meeting even the lowest bar for proper Active Directory integration. That lowest bar being the ability to properly find an Active Directory domain controller to use for LDAP operations. This is something that regularly plagues me and it is ridiculous that it is […]

I spent some time this weekend relearning something I learned 15 or so years ago… How to make 2.5.5.14 (DN with String) attribute schema changes that actually work. It’s simple but there is also a trick to it that you need to be aware of. Let’s go back a bit… I was recently asked about […]

I posted about this about a decade ago but going through email this morning I found at least 8 or 9 questions from people in some way shape or form related to it so I figured I would re-post and maybe it will show up search engines more or perhaps people will realize it still […]