RE : [ActiveDir] AD and DNS

2004-03-02 Thread Yves Boutemy
Title: Message



Hi,
 
I 
suggest you change the DNS zone to secondary before you demote 
AD.
 
Yves Boutemy, Architecte des 
Réseaux Informatiques
 
2 avenue des TilleulsLes 
Floralies69380 DOMMARTINFRANCE
 
Tél : +33 4 78 43 59 
08Mobile : +33 6 62 41 59 08Email : [EMAIL PROTECTED]Site Web : 
http://www.boutemy.com

  
  -Message d'origine-De : 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  De la part de Mike HogenauerEnvoyé : lundi 1 mars 2004 
  17:33À : [EMAIL PROTECTED]Objet : 
  [ActiveDir] AD and DNS
  I needing to demote one of my domain controllers because of out dated 
  hardware, etc. This server runs our Internal DHCP Scope and also has an AD 
  integrated DNS Zone. I know my DHCP services will still be there, what will 
  happened to the the DNS? Will it just become a secondary zone it the 
  Integrated Master or do I need to change this zone before I demote the Server? 
  
   
  Thanks in advance for any advice... 
   
  Mike 
   
   
  
  
  Mike 
  Hogenauer
  [EMAIL PROTECTED]
  
  Rendition 
  Networks, Inc.
  10735 Willows Rd 
  NE, Suite 150
  Redmond, 
  WA 
  98052
  425.636.2115 | Fax: 
  425.497.1149
   


RE: [ActiveDir] size of a group always returns 1000

2002-02-17 Thread Yves Boutemy

There is a limit on the Active Directory server. I found it when I browsed a
huge group with a java written utility.
Certainly, this limit avoid the server to be blocked by a too long request.

Yves Boutemy
Email : [EMAIL PROTECTED]
Site Web : http://www.boutemy.com

-Message d'origine-
De : [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]De la part de Narkinsky,
Brian
Envoyé : vendredi 15 février 2002 17:36
À : [EMAIL PROTECTED]
Objet : [ActiveDir] size of a group always returns 1000



I have the following VBS program

DIM adsMembers
Set adsGroup= GetObject("LDAP://CN=all-employees,OU=Distribution
Lists,DC=test,DC=net")
Set adsMembers=adsGroup.Members
Wscript.Echo "number of members of all employessp" & adsMembers.count

It always returns 1000.

I know there are more than 1000 in the group.

Any Ideas?

Brian
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



RE: [ActiveDir] Web Admin Tools

2002-02-19 Thread Yves Boutemy
Title: Message



See http://www.iit.edu/~gawojar/ldap/. 
Very usefull to test and debug LDAP access to a directory.

  -Message d'origine-De : 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]]De la part de Molloy, Gene 
  S.Envoyé : mardi 19 février 2002 21:38À : 
  '[EMAIL PROTECTED]'Objet : [ActiveDir] Web Admin 
  Tools
  Just curious if anyone has come across any inexpensive Web based tools 
  that can be used to Administer AD?
   
  Any comments would be appreciated.
   
  Gene Molloy
   


RE: [ActiveDir] Problems with ldap_modify

2002-02-21 Thread Yves Boutemy

Hello,

To move a directory tree to another location (or to modify the RDN), you
must use "Modify DN" LDAP operation. Do not use "Modify" LDAP operation. See
RFC 2251, chapter 4.6 for Modify, chapter 4.9 for Modify DN.

With ADSI, use an IADsContainer, the GetObject method to get a pointer on
the object you want to move, and the MoveHere method to move a tree or
rename an object.

Yves Boutemy.

-Message d'origine-
De : [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]De la part de David García
Envoyé : mercredi 20 février 2002 12:58
À : [EMAIL PROTECTED]
Objet : [ActiveDir] Problems with ldap_modify


Hi all!!

I have a problem. I'm trying to "map" a directory tree in AD.

I've created a class "Configuration-test", with "container" as a
possSuperior. I created two more classes..."Directory-Test", with
"Configuration-Test" as a possSuperior, and "File-Test", with the
"Directory-Test" as a possSuperior.

In this way, I want to create a visible structure below System entry in AD,
so a directory with path "C:\Test\Test2" will have this DN:
CN=Test2,CN=Test,CN=C,CN=Configuration-Test,CN=System,DC=MyDC

Test2 and Test, and C, the root, will be "Directory-Test" objects, all below
"Configuration-Test" object.

The problem appears whe I try to modify any of the entries. For example,
lets suppose that I want to remap the C unit to D unit, preserving all the
directory objects below it...I'm not sure what changes I have to do...I'm
sure I've to change the CN property, from "C" to "D"...do I have to change
more properties or will this work, and leave the path as
CN=Test2,CN=Test,CN=D,CN=Configuration-Test,CN=System,DC=MyDC?.

But there is a bigger problem...I've created only the root, "C" object...and
I've tried to modify this entry from "C" to "D", with a ldap_modify_s
call...this is the code:

char * ob_values[] = {"Directory-Test", NULL };

  ldapModClass.mod_op = LDAP_MOD_REPLACE;
  ldapModClass.mod_type = "objectClass";
  ldapModClass.mod_values = ob_values;

  cn = "CN=C,CN=Configuration-Test",CN=System,DC=MyDC";

  char * cn_values[] = { "D", NULL }; // New value, to remap C unit on D
unit

  ldapModCN.mod_op = LDAP_MOD_REPLACE;
  ldapModCN.mod_type = "cn";
  ldapModCN.mod_values= cn_values;

  rgldapMods[0] = &ldapModClass;
  rgldapMods[1] = &ldapModCN;
  rgldapMods[2] = NULL;

  CallValue=ldap_modify_s(pldap, cn,rgldapMods); // pldap is set with a
ldap_bind call

Even when I don't change the value, and leave the same "C" on the CN, the
ldap_modify_s fails with a Constraint Violation Error...I can't change this
oven when I use the ADSIViewer utility!

It's impossible to change the value os the CN property?...once created...can
I change the AD path for an object (is the distinguishedName property?)?

Sorry for so a long question, and thanks for all...

David

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



Re: [ActiveDir] NT sp6a does it have ADSI

2003-01-08 Thread Yves Boutemy
Hello,

The answer is no. Install ADSI after downloading from 
http://www.microsoft.com/NTWorkstation/downloads/Other/ADSI25.asp

Best regards,
Yves Boutemy

> When you install SP6a on a NT4 machine does that include the ADSI
> components?
> 
>  
> 
> Regards,
> 
> Carlos Magalhaes
> 
>  
> 
> 
> 
> -
> This email and any files transmitted are
> confidential and intended solely for the
> use of the individual or entity to which
> they are addressed, whose privacy
> should be respected.  Any views or
> opinions are solely those of the author
> and do not necessarily represent those
> of the Trencor Group, or any of its
> representatives, unless specifically
> stated.  
> 
> Email transmission cannot be guaranteed
> to be secure, error free or without virus
> contamination.  The sender therefore
> accepts no liability for any errors or
> omissions in the contents of this message,
> nor for any virus infection that might result
> from opening this message.  Trencor is not
> responsible in the event of any third party
> interception of this email.   
> 
> If you have received this email in error please notify
> [EMAIL PROTECTED]   For more information about
> Trencor, visit www.trencor.net <http://www.trencor.net>
> 



Yves Boutemy, Architecte Réseaux Télécommunications

2 avenue des Tilleuls
Les Floralies
69380 DOMMARTIN
FRANCE

Tél : +33 4 78 43 59 08

!!! Attention, nouveau numéro !!!
Mobile : +33 6 62 41 59 08

Email : [EMAIL PROTECTED]
Site Web : http://www.boutemy.com
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/