Accessing LDAP on Active Directory.

howdy,

  have several programs bugzilla, confluence, jira etc in past relied on third party ldap authentication.   use ad authentication now.

  when query ad using command line can display data when use domain admin account.

  when try using other account, 1 has domain admin rights or enterprise admin rights fails.

so question is:    there permission have give account able view ad ldap?

if it?




we able use single account these programs can query ad , check authentication.  (one minimal amount of permissions)

thanks always.

moe

create user just read access directory:

create user in aduc, name ldapreader or something like that. assign strong password. doesn't have in any special groups. follow guide below instead of selecting "anonymous logon" you'll select your newly created user.

 
you allow anonymous access dc through ldap, not recommended it's done way:

• on domain controller, run active directory users , groups administration tool.
• select top level of directory tree view in left hand panel, , right click. menu appear. select first item, should "delegate control..."
• click "next"
• in next window, titled "users or groups", click "add ..."
• in next list, select "anonymous logon" , click "add". may need select "everyone" , "guests" group, depending on how have active directory configured. click ok when done.
• click "next"
• select "create custom task delegate" , click "next".
• click "next"
• in next list, select "read". "read properties" selected @ same time. click "next" when done.
• click "finish".

you'll need right read properties in ad, edited on attribute-level on objects attributes readable who.

---

technet forums moderator | solution specialist | ask experts it-forum

Windows Server  >  Directory Services