RE: LDAP: Group List

2006-02-22 Thread Nick McClure
runs, it can automatically be redirected to one that is working. Just make sure you have more than one Global Catalog Server. > -Original Message- > From: Zaphod Beeblebrox [mailto:[EMAIL PROTECTED] > Sent: Wednesday, February 22, 2006 11:00 AM > To: CF-Community > Subject:

Re: LDAP: Group List

2006-02-22 Thread Zaphod Beeblebrox
Here's what I've uncovered for using ADSI queries. This is a view that I've created to pull all current active directory users who are 'normal' and not 'disabled'. ALTER VIEW valid_ad_users AS SELECT name,sAMAccountName as username FROM OpenQuery( ADSI,'; (&(objectCategory=pe

RE: LDAP: Group List

2006-02-22 Thread Nick McClure
re-mapped that somehow, but I cannot remember how we did that. I'm going through the code trying to remember. I'll pass that along once I figure it out. > -Original Message- > From: Dawson, Michael [mailto:[EMAIL PROTECTED] > Sent: Monday, February 20, 2006 5:35 PM > To:

RE: LDAP: Group List

2006-02-20 Thread Dawson, Michael
Awesome! -Original Message- From: Nick McClure [mailto:[EMAIL PROTECTED] Sent: Monday, February 20, 2006 4:43 PM To: CF-Community Subject: RE: LDAP: Group List Sure, We've been doing it with SQL 2000 for a couple of years now to feed user records into Blackboard. I'll s

RE: LDAP: Group List

2006-02-20 Thread Nick McClure
One of things that MS said is that if you increase it past 2500 it will cause problems with Exchange. > -Original Message- > From: Dawson, Michael [mailto:[EMAIL PROTECTED] > Sent: Monday, February 20, 2006 5:32 PM > To: CF-Community > Subject: RE: LDAP: Group List &

RE: LDAP: Group List

2006-02-20 Thread Nick McClure
06 5:35 PM > To: CF-Community > Subject: RE: LDAP: Group List > > Nick, can you give an example of a SQL view based on ADSI? > > How do you make the views? SQL Server 2000/2005? > > I current have a DTS package that pulls data from AD. I'm not sure if I > used LDAP

RE: LDAP: Group List

2006-02-20 Thread Dawson, Michael
Hmmm. Did you try: FILTER="(!isCriticalSystemObject=*)" I think that is similar to how MS showed on one of their support pages. M!ke -Original Message- From: Zaphod Beeblebrox [mailto:[EMAIL PROTECTED] Sent: Monday, February 20, 2006 3:46 PM To: CF-Community Subject: Re: L

RE: LDAP: Group List

2006-02-20 Thread Dawson, Michael
3:46 PM To: CF-Community Subject: RE: LDAP: Group List When using LDAP there are memory constraints that force the limit to 1000 records returned. ADSI doesn't have that limitation. We use ADSI to query all sorts of things. I actually just make SQL views based on ADSI queries and can pretty

RE: LDAP: Group List

2006-02-20 Thread Dawson, Michael
EMAIL PROTECTED] Sent: Monday, February 20, 2006 3:55 PM To: CF-Community Subject: RE: LDAP: Group List Are you guys running an exchange server? > -Original Message- > From: Dawson, Michael [mailto:[EMAIL PROTECTED] > Sent: Monday, February 20, 2006 4:31 PM > To: CF-Community &g

RE: LDAP: Group List

2006-02-20 Thread Nick McClure
Are you guys running an exchange server? > -Original Message- > From: Dawson, Michael [mailto:[EMAIL PROTECTED] > Sent: Monday, February 20, 2006 4:31 PM > To: CF-Community > Subject: RE: LDAP: Group List > > It will return more than 1000 records, but you have to

RE: LDAP: Group List

2006-02-20 Thread Nick McClure
ilto:[EMAIL PROTECTED] > Sent: Monday, February 20, 2006 4:31 PM > To: CF-Community > Subject: RE: LDAP: Group List > > It will return more than 1000 records, but you have to increase the > result amount in AD. Google for "ntdsutil" and "maxPageSize". The AD >

RE: LDAP: Group List

2006-02-20 Thread Nick McClure
nthat. > -Original Message- > From: Jillian Koskie [mailto:[EMAIL PROTECTED] > Sent: Monday, February 20, 2006 3:28 PM > To: CF-Community > Subject: Re: LDAP: Group List > > The number it will return is set in the AD... but to date we're only > dealing with about 300. >

Re: LDAP: Group List

2006-02-20 Thread Zaphod Beeblebrox
t* be something. > > -Original Message- > From: Zaphod Beeblebrox [mailto:[EMAIL PROTECTED] > Sent: Monday, February 20, 2006 3:15 PM > To: CF-Community > Subject: Re: LDAP: Group List > > on the subject of LDAP, how do you search for fields where a value is >

RE: LDAP: Group List

2006-02-20 Thread Dawson, Michael
I think it goes something like this: "mail=*" means that mail must be something. "!mail=#" means that mail must *not* be something. -Original Message- From: Zaphod Beeblebrox [mailto:[EMAIL PROTECTED] Sent: Monday, February 20, 2006 3:15 PM To: CF-Community Subj

RE: LDAP: Group List

2006-02-20 Thread Dawson, Michael
Original Message- From: Nick McClure [mailto:[EMAIL PROTECTED] Sent: Monday, February 20, 2006 2:32 PM To: CF-Community Subject: RE: LDAP: Group List How many groups are you talking about, that will only return the first 1000 records, and I think it will leave out some of the built in grou

Re: LDAP: Group List

2006-02-20 Thread Jillian Koskie
The number it will return is set in the AD... but to date we're only dealing with about 300. >How many groups are you talking about, that will only return the first 1000 >records, and I think it will leave out some of the built in groups. ~

Re: LDAP: Group List

2006-02-20 Thread Zaphod Beeblebrox
nly return the first 1000 > records, and I think it will leave out some of the built in groups. > > > -Original Message- > > From: Jillian Koskie [mailto:[EMAIL PROTECTED] > > Sent: Monday, February 20, 2006 2:26 PM > > To: CF-Community > > Subject: Re: LD

RE: LDAP: Group List

2006-02-20 Thread Nick McClure
gt; Subject: Re: LDAP: Group List > > Perfection! Thank you! My brain was having a serious hiccup! > > >Sure, just use a simple CFLDAP query with: > > > >FILTER="objectClass=group" > > > >ATTRIBUTES="cn,description,distinguishedNa

Re: LDAP: Group List

2006-02-20 Thread Jillian Koskie
Perfection! Thank you! My brain was having a serious hiccup! >Sure, just use a simple CFLDAP query with: > >FILTER="objectClass=group" > >ATTRIBUTES="cn,description,distinguishedName,mail,managedBy,member,membe >rOf,name,objectCategory,objectClass,sAMAccountName,whenChanged,whenCreat >ed" > >CFD

RE: LDAP: Group List

2006-02-20 Thread Dawson, Michael
Sure, just use a simple CFLDAP query with: FILTER="objectClass=group" ATTRIBUTES="cn,description,distinguishedName,mail,managedBy,member,membe rOf,name,objectCategory,objectClass,sAMAccountName,whenChanged,whenCreat ed" CFDUMP the LDAP query and Bob's your uncle. Then, use this on a single grou

RE: LDAP: Group List

2006-02-20 Thread Nick McClure
I'm sure there is with ADSI > -Original Message- > From: Jillian Koskie [mailto:[EMAIL PROTECTED] > Sent: Monday, February 20, 2006 1:59 PM > To: CF-Community > Subject: LDAP: Group List > > Is there a quick/easy way I can get a list of all of my AD groups? In a > usable format... > >