Adding users is pretty easy, however, to set the password, you need an
SSL connection for the CFLDAP tag.
The attribute for the password is unicodePwd, I believe.
I ran across this problem and then decided to create the user using a VB
COM object instead. It ties me to the Windows platform, but I don't
have any need to move to another platform in the distant future. I
still try to use CFLDAP as much as possible, but there are cases where I
have to write a simple VB COM object to do something special.
For Example, Windows 2003 Active Directory lets you assign a manager to
a domain group. There is a setting that allows the manager to make
changes to the domain group. In this case, Microsoft did not just add
an attribute that says the manager can update the members. Oh, no.
They did it the hard way. When you enable that switch, AD actually adds
the manager's domain account to the access control list and gives the
account permission to write members.
I had to write a VB COM object that loops through all permissions on the
AD object just to see if the users has access to change members. This
would be impossible with just CFLDAP.
As far as setting the permissions on a server, you probably can do so
just by running the cacls program using CFEXECUTE. Make sure your CF
services are running as a domain account that has permission to create
directories on the FTP server.
Timing becomes an issue when you do things like this. If you have
multiple domain controllers, the account is created on one of those.
However, when you try to create the FTP directory and give permissions,
the FTP server may be associated with a different domain controller.
When you attempt to give access to the user, your script may throw an
error that the user does not exist. This could be caused by the delay
in syncing the two domain controllers.
In this case, I would probably create the user account in real-time.
Then, I would have a scheduled task that runs every 10 minutes, or so,
that checks for new users, then creates their FTP directory and assigns
permissions.
M!ke
-Original Message-
From: Ryan Mitchell [mailto:[EMAIL PROTECTED]
Sent: Thursday, September 29, 2005 6:44 AM
To: CF-Talk
Subject: Scripting Window User Additions/Permissions on directories
Hello
I'm running windows 2003 server and CFMX 7.
Has anybody come across a way of adding users (Active Directory -
CFLDAP?), and setting directory permissions under this configuration.
Basically, i'm wanting to script addition of FTP users, and set up
permissions on the necessary directories for the user i have just
created..
Somebody must have done it.. :)
Please share!
Ryan
~|
Find out how CFTicket can increase your company's customer support
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:219613
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations Support: http://www.houseoffusion.com/tiny.cfm/54
