Re: Creating Active Directory Objects

2007-11-07 Thread Michael Ströder 
Geert Jansen wrote:
> 
> It is definately possibly to create active directory users with
> python-ldap. You just need to take care that you set the minimum amount
> of attributes required, otherwise the addition will fail. I don't have
> any code ready at the moment, but just create a user object with ADUC
> and see what attributes that sets. Then take these as a base. Note that
> you don't need to create the SID and the GUID -- these are created
> automatically by AD.

I vaguely remember that there are some issues with really activating a
user entry as a Windows user. But this is not a problem of accessing AD
via python-ldap.

Ciao, Michael.

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
___
Python-LDAP-dev mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/python-ldap-dev

Re: Creating Active Directory Objects

2007-11-07 Thread Geert Jansen 
Michael Ströder wrote:

> I vaguely remember that there are some issues with really activating a
> user entry as a Windows user. But this is not a problem of accessing AD
> via python-ldap.
>   

This indeed rings a bell. You need to create the user as disabled (look
for userAccountControl on MSDN), set a compliant password, and then
enable him.

Regards,
Geert

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
___
Python-LDAP-dev mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/python-ldap-dev

RE: Creating Active Directory Objects

2007-11-07 Thread Mike Matz 
Thanks for the help guys.  It got me off to a great start.  I have successfully 
created a user in my AD.  As you already eluded to, I am struggling with the 
password attribute.  Can the password attribute be set when creating a user.  
From what I gathered, the password attribute is 'unicodePwd'.  This attribute 
cannot be created, it can only be modified.  Is this attribute created by 
default when a user is created?  Would I be able to do an add and then a modify 
to set the password?  I am aware of the fact that there are certain 
restrictions in place in order to modify the password.  I have setup my AD to 
include SSL and I am able to bind as Administrator over port 636.  With that 
said one of the examples I ran across for adding a user refers to another 
attribute 'userPassword'.  I am unable to tell what this attribute is.  In the 
link below, it appears that the password is being set when the entry is added.  
I have tried this unsuccessfully.  I appreicate all the help thus far.
Regards,
Mike

Example Add Entry - http://www.grotan.com/ldap/python-ldap-samples.html


-Original Message-
From: Geert Jansen [mailto:[EMAIL PROTECTED]
Sent: Wed 11/7/2007 1:50 PM
To: Michael Ströder
Cc: Mike Matz; [email protected]
Subject: Re: Creating Active Directory Objects
 
Michael Ströder wrote:

> I vaguely remember that there are some issues with really activating a
> user entry as a Windows user. But this is not a problem of accessing AD
> via python-ldap.
>   

This indeed rings a bell. You need to create the user as disabled (look
for userAccountControl on MSDN), set a compliant password, and then
enable him.

Regards,
Geert

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/___
Python-LDAP-dev mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/python-ldap-dev