Re: CFLDAP socket closed error against SSL

2013-12-18 Thread Dave Watts
Used LDAP Browser and it fails with the following message: CA certificate is not in the server certificate chain So I've used the keytool to import the all three: 1 - Comodo CA 2 - the intermediate/root cert of the server 3 - the cert of the server itself. Restarted and it still

CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
: An error has occurred while trying to execute query :servername.com:636; socket closed. However, if I run that SAME cfldap command in a .cfm file out in a regular web folder (i.e. not as a Custom Tag under the ColdFusion directory), it works fine! I have restarted the server to make sure any old

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
applications and authenticates them to a Sun LDAP server. We are moving to an Active Directory service, and when I attempt to do a bind against the new system, I get: An error has occurred while trying to execute query :servername.com:636; socket closed. However, if I run that SAME cfldap

RE: CFLDAP socket closed error against SSL

2013-12-10 Thread Robert Harrison
Blog: http://www.austin-williams.com/blog Twitter: http://www.twitter.com/austin_williams -Original Message- From: Dan LeGate [mailto:d...@legeek.com] Sent: Tuesday, December 10, 2013 3:50 PM To: cf-talk Subject: Re: CFLDAP socket closed error against SSL I take it back... exact

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Russ Michaels
, and when I attempt to do a bind against the new system, I get: An error has occurred while trying to execute query :servername.com:636; socket closed. However, if I run that SAME cfldap command in a .cfm file out in a regular web folder (i.e. not as a Custom Tag under the ColdFusion

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
, and when I attempt to do a bind against the new system, I get: An error has occurred while trying to execute query :servername.com:636; socket closed. However, if I run that SAME cfldap command in a .cfm file out in a regular web folder (i.e. not as a Custom Tag under the ColdFusion directory

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Russ Michaels
: servername.com:636; socket closed. However, if I run that SAME cfldap command in a .cfm file out in a regular web folder (i.e. not as a Custom Tag under the ColdFusion directory), it works fine! I have restarted the server to make sure any old Custom Tag code isn't somehow cached. I have

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread .jonah
applications and authenticates them to a Sun LDAP server. We are moving to an Active Directory service, and when I attempt to do a bind against the new system, I get: An error has occurred while trying to execute query :servername.com:636; socket closed. However, if I run that SAME cfldap

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread .jonah
to execute query : servername.com:636; socket closed. However, if I run that SAME cfldap command in a .cfm file out in a regular web folder (i.e. not as a Custom Tag under the ColdFusion directory), it works fine! I have restarted the server to make sure any old Custom Tag code isn't somehow cached

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
run that SAME cfldap command in a .cfm file out in a regular web folder (i.e. not as a Custom Tag under the ColdFusion directory), it works fine! I have restarted the server to make sure any old Custom Tag code isn't somehow cached. I have verified the SSL (636) port is open to the CF server

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread .jonah
. We are moving to an Active Directory service, and when I attempt to do a bind against the new system, I get: An error has occurred while trying to execute query :servername.com:636; socket closed. However, if I run that SAME cfldap command in a .cfm file out in a regular web folder (i.e

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
to an Active Directory service, and when I attempt to do a bind against the new system, I get: An error has occurred while trying to execute query :servername.com:636; socket closed. However, if I run that SAME cfldap command in a .cfm file out in a regular web folder (i.e. not as a Custom Tag under

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Mahcsig
the new system, I get: An error has occurred while trying to execute query : servername.com:636; socket closed. However, if I run that SAME cfldap command in a .cfm file out in a regular web folder (i.e. not as a Custom Tag under the ColdFusion directory), it works fine! I have

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dave Watts
That's only necessary if the certificate from the LDAP server isn't signed by a known CA. (e.g. it's self-signed.) ... or signed by a root CA that's not in the keystore - this happens fairly commonly in my experience. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
to an Active Directory service, and when I attempt to do a bind against the new system, I get: An error has occurred while trying to execute query : servername.com:636; socket closed. However, if I run that SAME cfldap command in a .cfm file out in a regular web folder (i.e. not as a Custom Tag

Re: CFLDAP Lookups vs Binds?

2013-11-19 Thread Dan LeGate
Anyone doing this? On 11/7/2013 4:49 PM, Dan LeGate wrote: Am I performing my queries vs binds correctly? This is my lookup query: cfldap action = QUERY name = GetInfo start = ou=people,dc=ad,dc=institution,dc=edu filter = (|(samAccountName=dx7668

CFLDAP Lookups vs Binds?

2013-11-07 Thread Dan LeGate
Am I performing my queries vs binds correctly? This is my lookup query: cfldap action = QUERY name = GetInfo start = ou=people,dc=ad,dc=institution,dc=edu filter = (|(samAccountName=dx7668)) attributes = samAccountName,cn,sn,givenName scope = SUBTREE

Re: CFLDAP Fieldname Aliases?

2013-09-17 Thread Dan LeGate
Thanks Dave! This worked great. Dan On 9/16/2013 12:22 PM, Dave Watts wrote: Is there and equivalent to: select LName as Last_Name for CFLDAP? If not, what other workarounds are there to make those query results have the names you want rather than the fieldnames from the LDAP server

CFLDAP Fieldname Aliases?

2013-09-16 Thread Dan LeGate
Is there and equivalent to: select LName as Last_Name for CFLDAP? If not, what other workarounds are there to make those query results have the names you want rather than the fieldnames from the LDAP server? cflooping over a QueryNew? Seems onerous. Any advice/tips are appreciated. Thanks

Re: CFLDAP Fieldname Aliases?

2013-09-16 Thread Dave Watts
Is there and equivalent to: select LName as Last_Name for CFLDAP? If not, what other workarounds are there to make those query results have the names you want rather than the fieldnames from the LDAP server? cflooping over a QueryNew? Seems onerous. Since CFLDAP returns a query object

Re: CFLDAP query attribute with multiple values

2010-11-02 Thread Mahcsig
Are you using the separator attribute? I use it to query active directory for user groups and it returns a list of all memberOf entries. I haven't tried it without the separator though. ~Mahcsig On Mon, Nov 1, 2010 at 7:38 PM, Azadi Saryev azadi.sar...@gmail.com wrote: does cfldap tag

Re: CFLDAP query attribute with multiple values

2010-11-02 Thread Azadi Saryev
very interesting - somehow i have missed the separator attribute of cfldap tag when checking its syntax... will try it first thing tomorrow morning. thanks for the tip, Mahcsig - i will post results (or more questions) tomorrow. On 02/11/2010 21:10 , Mahcsig wrote: Are you using the separator

CFLDAP query attribute with multiple values

2010-11-01 Thread Azadi Saryev
does cfldap tag support querying for an attribute with multiple values? it seems no matter what i do, it only returns the first value of an attribute... our school uses mac os x server ldap service (based on openldap), and some user attributes are multivalued, but cfldap only ever returns

Re: Has anyone ever successfully changed an AD password through CFLDAP?!

2010-08-04 Thread Ivan Lazovic
...unicodePw 0060: 64 31 20 04 1E 22 00 6E 00 65 00 77 00 50 00 61 d1 ...n.e.w.P.a 0070: 00 73 00 73 00 77 00 6F 00 72 00 64 00 31 00 21 .s.s.w.o.r.d.1.! 0080: 00 22 00 A0 1B 30 19 04 17 32 2E 31 36 2E 38 34 0...2.16.84 ^ CFLDAP (fails): 0050: 0A 01 02 30 2B 04 0A 75 6E 69

Re: Has anyone ever successfully changed an AD password through CFLDAP?!

2010-05-27 Thread Matthew Small
already figured this out though. - Matt Small I've read everything I can find on the internet about using CFLDAP to reset/change an Active Directory password, and every thread trails off with no success. I've been working on this for the last several days, and I've come to be convinced that its

Has anyone ever successfully changed an AD password through CFLDAP?!

2010-05-21 Thread Smith, Ed
I've read everything I can find on the internet about using CFLDAP to reset/change an Active Directory password, and every thread trails off with no success. I've been working on this for the last several days, and I've come to be convinced that its impossible to reset a user's password in AD

Use CFLDAP to retrieve list of groups user belongs to

2010-01-28 Thread Dawn Sekel
Hi: I currently use this command to authenticate a user against our AD. cfldap action=QUERY name=results start=dc=DomainName,dc=com server=serveripaddress username=#trim(form.username

RE: Use CFLDAP to retrieve list of groups user belongs to

2010-01-28 Thread Jon Sala
Just loop through the memberOf data as a list: cfldap action=query name=qryLDAP start=DC=yourdomain,DC=ca attributes=cn,title,mail,telephonenumber,givenname,sn,department,description,memberOf,samaccountname scope=SUBTREE filter

Re: Use CFLDAP to retrieve list of groups user belongs to

2010-01-28 Thread Dawn Sekel
That Worked! Thank you. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330246

CFLDAP SSL

2009-12-08 Thread Jake Churchill
I'm working on an SSL integration of CFLDAP for a client and am consistently getting Connection to LDAP server failed. All attributes are correct and for testing I'm attempting a simple query with * for attributes and maxrows of 10. Snippet below. Everything is straight from the IT staff

Re: CFLDAP SSL

2009-12-08 Thread Dave Watts
All attributes are correct and for testing I'm attempting a simple query with * for attributes and maxrows of 10.  Snippet below.  Everything is straight from the IT staff that controls the LDAP server.  I read this article: http://kb2.adobe.com/cps/191/tn_19139.html#enableCF which stated

Re: CFLDAP SSL

2009-12-08 Thread Tom Jones
Yes, you have to install the cert, and you have to restart the cfm service as well. The other thing I'm not seeing in your cfldap tag is the port. If it's missing it's will default to 389 not the standard 636 for ssl. tom On Dec 8, 2009, at 8:50 AM, Jake Churchill wrote: I'm working

Recursive CFLDAP calls

2009-11-16 Thread Charlie Griefer
Hi All: I'm in the middle of a contract that's making pretty extensive use out of CFLDAP (which I've maybe used twice prior to this job). One task is to write a method that gets users by group. Problem is, some of the group members are groups themselves. The request came in to recurse over

Re: Recursive CFLDAP calls

2009-11-16 Thread charlie griefer
of CFLDAP (which I've maybe used twice prior to this job). One task is to write a method that gets users by group. Problem is, some of the group members are groups themselves. The request came in to recurse over the results and check each one to see if it's a person or a group, and if a group, re-run

Re: Decipher CFLDAP date values

2009-08-04 Thread Wally Randall
That formula is still not correct: adexplorer shows this date: 7/2/2009 12:33:05 PM cfldap returns this integer8 value: 128910259851092856 The coldfusion code shown below returns this date: January 07, 1601 09:47:01 --- cfset sLDAPDate = 128910259851092856 cfset iLogonTime = left

Re: Decipher CFLDAP date values

2009-08-04 Thread Wally Randall
SOLVED: This code shows how to translate the LDAP dates returned by ColdFusion tag cfldap and to determine the number of days since the password was last changed. It is based on code found on Scott Pinkston's blog: http://www.scottpinkston.org/blog/index.cfm/2009/1/3/Detecting-password-age

RE: Decipher CFLDAP date values

2009-08-03 Thread Dawson, Michael
http://cflib.org/udf/convertActiveDirectoryTime _ From: Dave Phillips [mailto:experiencedcfdevelo...@gmail.com] Sent: Fri 7/31/2009 10:34 PM To: cf-talk Subject: RE: Decipher CFLDAP date values Wally, I don't know if you figured this out yet or not, but using this page: http

Decipher CFLDAP date values

2009-07-31 Thread Wally Randall
When returning date/time values from active directory the CFLDAP tag provides an integer value which must be decoded. What is the formula for converting the integer value to a human readable date? example: LASTLOGON returns 128922162522263907

Re: Decipher CFLDAP date values

2009-07-31 Thread Dave Watts
When returning date/time values from active directory the CFLDAP tag provides an integer value which must be decoded.  What is the formula for converting the integer value to a human readable date? example:  LASTLOGON returns 128922162522263907 http://techtasks.com/code/viewbookcode

RE: Decipher CFLDAP date values

2009-07-31 Thread Dave Phillips
#dateFormat(iLogonTime, dd, )# #timeFormat(iLogonTime,hh:mm:ss)#/cfoutput Dave Phillips -Original Message- From: Wally Randall [mailto:wally.rand...@comcast.net] Sent: Friday, July 31, 2009 3:31 PM To: cf-talk Subject: Decipher CFLDAP date values When returning date/time values

Re: CFLDAP and tokengroups

2009-06-23 Thread John J
Hi - I see this mentioned: I am in more than one group, so I don't think the CFLDAP results are correct. I have asked some Adobe reps to confirm if multi-value, binary attributes are being handled correctly. It is possible that the returnasbinary option does not handle multi-valued attributes

RE: CFLDAP and tokengroups

2009-06-23 Thread Dawson, Michael
I have not yet found a solution, but I have not worked on it much since the last writing of this thread. Thanks, Mike -Original Message- From: John J [mailto:johnv20...@yahoo.com] Sent: Tuesday, June 23, 2009 3:48 PM To: cf-talk Subject: Re: CFLDAP and tokengroups Hi - I see

Strange CFLdap Active Directory issue

2009-06-17 Thread Ian Skinner
We have a intermittent strange issue using cfldap to access user's active directory records. We use this on web resources secured with Windows Integrated Security in IIS. The ColdFusion code then uses the cgi.auth_user value to read the users ldap record and parses out the groups of which

Re: Strange CFLdap Active Directory issue

2009-06-17 Thread Dave Watts
This all works as expected with the majority of the users.  The trouble is that for four users, they are denied access to content, even though everything we can look at says they are members of the proper group. Can anybody provide suggestions on what places we should investigate this

RE: Strange CFLdap Active Directory issue

2009-06-17 Thread Dawson, Michael
-talk Subject: Strange CFLdap Active Directory issue We have a intermittent strange issue using cfldap to access user's active directory records. We use this on web resources secured with Windows Integrated Security in IIS. The ColdFusion code then uses the cgi.auth_user value to read the users

Re: Strange CFLdap Active Directory issue

2009-06-17 Thread Ian Skinner
Dave Watts wrote: Are other members of the proper group able to access the content? That is, is it a user problem or a group problem? Can you monitor the LDAP traffic and see what's going on? http://justgeeks.blogspot.com/2009/05/using-wireshark-to-sniff-active.html Dave Watts, CTO, Fig

CFLDAP and tokengroups

2009-02-27 Thread Jeff Becker
Good morning, I have the following code to attempt to get at a users' groups the most efficient way. CFLDAP SERVER=my.ldap.server ACTION=QUERY USERNAME=aaa PASSWORD=bbb NAME=results START=DC=ent,DC=c,DC=dd,DC=corp FILTER

RE: CFLDAP and tokengroups

2009-02-27 Thread Dawson, Michael
AM To: cf-talk Subject: CFLDAP and tokengroups Good morning, I have the following code to attempt to get at a users' groups the most efficient way. CFLDAP SERVER=my.ldap.server ACTION=QUERY USERNAME=aaa PASSWORD=bbb NAME=results START=DC=ent,DC

Re: CFLDAP and tokengroups

2009-02-27 Thread Jeff Becker
Michael, Thanks for your thoughts. The big task at hand is to get all a user's groups and most importantly recursively go up the chain. So for example, user jbecker is apart of AD GROUP San Fran, that group is apart of California Users, and that group is apart of All Corporate Users. --- so

Re: CFLDAP and tokengroups

2009-02-27 Thread Jeff Becker
doesn't = DOES :) ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive:

RE: CFLDAP and tokengroups

2009-02-27 Thread Dawson, Michael
of these attributes are active in AD. This sucks because I would really like to research this attribute. Thanks, Mike -Original Message- From: Jeff Becker [mailto:jpbec...@yahoo.com] Sent: Friday, February 27, 2009 9:22 AM To: cf-talk Subject: Re: CFLDAP and tokengroups Michael, Thanks for your

RE: CFLDAP and tokengroups

2009-02-27 Thread Dawson, Michael
I figured it out, somewhat. In CFLDAP, the START attribute must be the distinguishedName of the object you want to inspect. The SCOPE must be set to BASE. Here is a working example (add your server and authentication info): cfldap action = query name

Re: CFLDAP and tokengroups

2009-02-27 Thread Jeff Becker
Good man!! WOW! My CFDUMP isn't returning anything... but the code is indeed functioning. Is your CFDUMP empty or displaying something?? I may need to play with my filter. My AD Contact says we would now have each groups SID (Security Identifier). With that, its a matter of then querying

RE: CFLDAP and tokengroups

2009-02-27 Thread Dawson, Michael
This is what my dumps are. http://acelinkdev.evansville.edu/activedirectory/groups/tokengroups.cfm I am in more than one group, so I don't think the CFLDAP results are correct. I have asked some Adobe reps to confirm if multi-value, binary attributes are being handled correctly

Re: CFLDAP and tokengroups

2009-02-27 Thread Jeff Becker
Interesting... The scope=base is what is killing mine. I'm not sure if I need to change my START value or what??? According to docs: oneLevel: entries one level below entry. == DEFAULT base: only the entry. But not exactly sure what that means.. in any regard, I'm getting closer and closer

RE: CFLDAP and tokengroups

2009-02-27 Thread Dawson, Michael
...@yahoo.com] Sent: Friday, February 27, 2009 11:49 AM To: cf-talk Subject: Re: CFLDAP and tokengroups Interesting... The scope=base is what is killing mine. I'm not sure if I need to change my START value or what??? According to docs: oneLevel: entries one level below entry. == DEFAULT base: only

RE: Proper Authentication with CFLDAP?

2008-10-24 Thread Dawson, Michael
the UserIsValid variable is 0. Mike -Original Message- From: Marie Taylore [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2008 4:01 PM To: cf-talk Subject: Proper Authentication with CFLDAP? I just received this code as the proper way to bind someone during an LDAP login

Re: Proper Authentication with CFLDAP?

2008-10-24 Thread Shannon Peevey
need the cfelse part of your condition. You already know the UserIsValid variable is 0. Mike -Original Message- From: Marie Taylore [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2008 4:01 PM To: cf-talk Subject: Proper Authentication with CFLDAP? I just received this code

RE: Proper Authentication with CFLDAP?

2008-10-24 Thread Dawson, Michael
AD is closest to #2 in your list. Mike -Original Message- From: Shannon Peevey [mailto:[EMAIL PROTECTED] Sent: Friday, October 24, 2008 8:54 AM To: cf-talk Subject: Re: Proper Authentication with CFLDAP? There are three types of binds that a LDAP server can be configured for: 1

CFLDAP to Update altRecipient in Active Directoy / Exchange

2008-10-23 Thread Dennis Hughes
of the mail enabled contact that was created) Current Code: cfldap action=modify dn=#thisDN# attributes=altRecipient=#forwardDN#,deliverAndRedirect=TRUE modifytype=add server=#this.adServer# username=#adAdminUserNameDN# password=#adAdminPassword# I

RE: CFLDAP to Update altRecipient in Active Directoy / Exchange

2008-10-23 Thread Dawson, Michael
Instead of altRecipient, try altRecipientBL. mike -Original Message- From: Dennis Hughes [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2008 11:23 AM To: cf-talk Subject: CFLDAP to Update altRecipient in Active Directoy / Exchange I am totally stumped on how I can update

Re: CFLDAP to Update altRecipient in Active Directoy / Exchange

2008-10-23 Thread Dennis Hughes
that is present within our Active Directory Contacts through the General Exchange tab. I can toggle on and off the deliverAndRedirect check box, but I am unable to add anything to the altRecipient field (which should be the DN of the mail enabled contact that was created) Current Code: cfldap

RE: CFLDAP to Update altRecipient in Active Directoy / Exchange

2008-10-23 Thread Dawson, Michael
SEPARATOR. (I can never remember which one does what.) ;^) Heck, go ahead and set both DELIMITER and SEPARATOR to a tab. It doesn't hurt a thing. Mike -Original Message- From: Dennis Hughes [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2008 12:36 PM To: cf-talk Subject: Re: CFLDAP

Re: CFLDAP to Update altRecipient in Active Directoy / Exchange

2008-10-23 Thread Dennis Hughes
Just gave this a shot and getting the same error. I changed the code so that I am only dealing with the altRecipientBL now and not trying to complicate things. Tried both the Pike and the Tab - error results were the same. Here is the updated code: cfldap action=modify dn=#thisDN

Re: CFLDAP to Update altRecipient in Active Directoy / Exchange

2008-10-23 Thread Dennis Hughes
I have it now ... Changed the delimiter and separator to ; for the altRecipientBL add, then used a second cfldap modify to update the deliverAndRedirect but instead of the modifytype being add it needed to be Replace. I used the delimiter as ; and the separator as , for that call. Thanks

RE: CFLDAP to Update altRecipient in Active Directoy / Exchange

2008-10-23 Thread Dawson, Michael
Good catch. Glad to help. Mike -Original Message- From: Dennis Hughes [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2008 1:35 PM To: cf-talk Subject: Re: CFLDAP to Update altRecipient in Active Directoy / Exchange I have it now ... Changed the delimiter and separator

Proper Authentication with CFLDAP?

2008-10-23 Thread Marie Taylore
I just received this code as the proper way to bind someone during an LDAP login to a ColdFusion App. Is this really the right way? cfset UserIsValid = 0 CFTRY cfldap action=QUERY name=Authenticate start=uid=#username#,ou=#OurOU#,dc=#OurDC#,dc=#OurDC2# attributes=cn

Re: Proper Authentication with CFLDAP?

2008-10-23 Thread Shannon Peevey
Yes, this would let you know that they are authenticated. It assumes that you LDAP server allows users to read from the tree. I'm not sure about using the full DN to the object with the start key. I always use the people container. Here is my example: cfldap name=authenticate

RE: CFLDAP different number of results on same search?

2008-10-10 Thread Dawson, Michael
Remove the timeout attribute and it should work fine. I never use the CFLDAP timeout attribute. I let the page's timeout value control that. I figure if the ldap query times-out, then the results are no good (since they vary so much) and the entire page may as well fail. Mike -Original

CFLDAP different number of results on same search?

2008-10-09 Thread Dan LeGate
I have a CFLDAP query that seems to be giving me a different number of results every time I search for the same text with the same filter, attributes, etc. Has anyone seen this behavior? Here's the code: cfldap action=QUERY name=GetResults attributes

Re: CFLDAP different number of results on same search?

2008-10-09 Thread Barney Boisvert
, Dan LeGate [EMAIL PROTECTED] wrote: I have a CFLDAP query that seems to be giving me a different number of results every time I search for the same text with the same filter, attributes, etc. Has anyone seen this behavior? Here's the code: cfldap action=QUERY name

Re: CFLDAP different number of results on same search?

2008-10-09 Thread Aaron Rouse
value until that didn't happen anymore and hope for the best. cheers, barneyb On Thu, Oct 9, 2008 at 4:13 PM, Dan LeGate [EMAIL PROTECTED] wrote: I have a CFLDAP query that seems to be giving me a different number of results every time I search for the same text with the same filter

Re: CFLDAP different number of results on same search?

2008-10-09 Thread Dan LeGate
, barneyb On Thu, Oct 9, 2008 at 4:13 PM, Dan LeGate [EMAIL PROTECTED] wrote: I have a CFLDAP query that seems to be giving me a different number of results every time I search for the same text with the same filter, attributes, etc. Has anyone seen this behavior? Here's the code

Re: CFLDAP different number of results on same search?

2008-10-09 Thread Dan LeGate
: I have a CFLDAP query that seems to be giving me a different number of results every time I search for the same text with the same filter, attributes, etc. Has anyone seen this behavior? Here's the code: cfldap action=QUERY name=GetResults attributes

Re: CFLDAP different number of results on same search?

2008-10-09 Thread Aaron Rouse
the timeout period and gives up. Only solution I found was to crank up the timeout value until that didn't happen anymore and hope for the best. cheers, barneyb On Thu, Oct 9, 2008 at 4:13 PM, Dan LeGate [EMAIL PROTECTED] wrote: I have a CFLDAP query that seems to be giving me

CFLDAP Query / Add/Modify Users in AD

2008-08-14 Thread Isidro Pimentel
results. 2. Modify - When I attempt to modify a user I get the following error: LDAP: error code 19 - 0057: LdapErr: DSID-0C090A85, comment: Error in attribute conversion operation, data 57, vece This is add user and it works. User is added into ad but it is not activated. cfldap action=add

RE: CFLDAP Query / Add/Modify Users in AD

2008-08-14 Thread Dawson, Michael
. Don't make the value too large. I would suggest setting it a few hundred higher than your maximum amount of object that you want to query. For example, if you have 9,000 user objects, set maxPageSize to 10,000. 2. Look at the CFLDAP attributes of SEPARATOR and DELIMITER. Also, try to set only one

cfldap error

2008-08-11 Thread Eclectic User
cfldap action=query name=qryLDAPUser start=dc=domain,dc=com attributes=uid,cn,sn,ou,o,c,dn filter=(uid=#arguments.email#) server = my LDAP server address password=server password username=username cfif qryLDAPUser.recordcount cfldap server = my LDAP server address action=delete dn=(dn

RE: cfldap error

2008-08-11 Thread Dawson, Michael
A DN begins with CN=, not DN= as in your code. Also, drop the parenthesis. Change your code to: dn=#qryLDAPUser.dn#... m!ke _ From: Eclectic User [mailto:[EMAIL PROTECTED] Sent: Mon 8/11/2008 8:00 PM To: CF-Talk Subject: cfldap error cfldap action=query name=qryLDAPUser

workarounds for cfldap MS AD SSLv3 / TLSv1

2008-07-11 Thread Jochem van Dieten
and CF can at best use SSLv2. For a quick test I tunneled the cfldap traffic over an stunnel connection (http://stunnel.org/) without client certificates and that worked fine, but I would rather not depend on that in a production environment. Any recommendations for an LDAP library that can do

Re: workarounds for cfldap MS AD SSLv3 / TLSv1

2008-07-11 Thread Shannon Peevey
). Unfortunately it appears as if the LDAP server will only accept SSLv3 and TLSv1 and CF can at best use SSLv2. For a quick test I tunneled the cfldap traffic over an stunnel connection (http://stunnel.org/) without client certificates and that worked fine, but I would rather not depend

CFLDAP groups

2008-06-05 Thread Den Made
and its on Windows 2003 Will appreciate your help as always. cfldap action=QUERY name=GetLDAP3 attributes=uid start=ou=new group, ou=groups,dc=example,dc=com Scope=subtree filter=((objectclass=groupOfUniqueNames)(cn=New Group)(uniqueMember=*)) server=xxx.xxx.x.xxx

RE: CFLDAP groups

2008-06-05 Thread Dawson, Michael
the attributes as needed for your LDAP server.) If you post your exact issue, I can try to help more. m!ke -Original Message- From: Den Made [mailto:[EMAIL PROTECTED] Sent: Thursday, June 05, 2008 11:03 AM To: CF-Talk Subject: CFLDAP groups I have run into a big problem setting and searching

Re: CFLDAP groups

2008-06-05 Thread Den Made
using the CFLDAP tag below but I am not finding the members, what am I doing wrong? cfldap action=QUERY name=GetLDAP3 attributes=uid start=dc=example,dc=com Scope=subtree filter=((objectClass=groupOfUniqueNames)(memberOf=cn=New Group, dc=example, dc=com)) server

RE: CFLDAP groups

2008-06-05 Thread Dawson, Michael
:[EMAIL PROTECTED] Sent: Thursday, June 05, 2008 1:30 PM To: CF-Talk Subject: Re: CFLDAP groups Thanks Michael, I am using Sun Directory Server 6.0 on Windows 2003. I created a static group and Added users from different Organizational Units (Group Member (uniqueMember) Now I want to Query

cfldap

2008-05-27 Thread Chad Gray
If I have the users old password can I change the password to something new using CFLDAP? ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk

RE: cfldap

2008-05-27 Thread Dawson, Michael
!ke -Original Message- From: Chad Gray [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 27, 2008 3:19 PM To: CF-Talk Subject: cfldap If I have the users old password can I change the password to something new using CFLDAP

RE: cfldap

2008-05-27 Thread Dave Watts
You can also run the CF service as a domain user with enough permission to change a user's password. You won't need the old password to do this. If you do this, though, you will break any access to local encrypted filesystems on that user's machine, I think. Dave Watts, CTO, Fig Leaf

RE: cfldap

2008-05-27 Thread Dawson, Michael
Watts [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 27, 2008 3:34 PM To: CF-Talk Subject: RE: cfldap You can also run the CF service as a domain user with enough permission to change a user's password. You won't need the old password to do this. If you do this, though, you will break any

RE: cfldap

2008-05-27 Thread Dave Watts
I think that is only if he is changing a local computer account's password. Domain accounts won't have that problem. Yeah, I think you're right about that. My mistake. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized

CFLDAP Password expires

2008-05-20 Thread Keith McGee
I wrote this app to display when a users password expires, it appears I am going of the wrong field, can someone direct me to the right field or let me know if I am way of base. Thanks, Keith cftry cfldap server = servername username=#usr#.domain password=#pss# action = query

RE: CFLDAP Password expires

2008-05-20 Thread Dawson, Michael
-Talk Subject: CFLDAP Password expires I wrote this app to display when a users password expires, it appears I am going of the wrong field, can someone direct me to the right field or let me know if I am way of base. Thanks, Keith cftry cfldap server = servername username=#usr#.domain

Re: CFLDAP Password expires

2008-05-20 Thread Keith McGee
Thank you for the infromation about pswLastChange, that lead me to this post a href=http://www.houseoffusion.com/groups/cf-talk/thread.cfm/threadid:46206;http://www.houseoffusion.com/groups/cf-talk/thread.cfm/threadid:46206/a and the solution !--- this is the date value from LDAP

Catching and Displaying Errors with CFLDAP

2008-05-09 Thread Den Made
Server 2003 through ColdFusion as per our project's requirement. I use the code that is given below: cfparam type=string name=LoginMessage default= .. .. cftry cfldap action=QUERY name=AunthenticateUser attributes=uid start=ou=People,dc=example,dc=com Scope=subtree filter = ((objectclass=person

RE: Catching and Displaying Errors with CFLDAP

2008-05-09 Thread Dawson, Michael
cftry cfldap... cfcatch cfdump var=#cfcatch# !--- Look for the cfcatch struct var that contains the error message --- /cfcatch /cftry Once you find the cfcatch struct var, use it in a CFIF block inside the CFCATCH block. m!ke -Original Message- From: Den Made [mailto

Re: Catching and Displaying Errors with CFLDAP

2008-05-09 Thread Den Made
connecting to Sun One Directory Server 6.0 on Windows Server 2003 through ColdFusion as per our project's requirement. I use the code that is given below: cfparam type=string name=LoginMessage default= .. .. cftry cfldap action=QUERY name=AunthenticateUser attributes=uid start=ou

Re: Catching and Displaying Errors with CFLDAP

2008-05-09 Thread Den Made
Thanks a bunch, I real appreciate your help, it worked just fine!!! cftry cfldap... cfcatch cfdump var=#cfcatch# !--- Look for the cfcatch struct var that contains the error message --- /cfcatch /cftry Once you find the cfcatch struct var, use it in a CFIF block inside

CFLdap and CF8

2008-04-15 Thread Chad Gray
We had LDAP code that was working in CF7 now it is not working in CF8. Has something changed? We are adding a user to LDAP and get this error: An error has occured while trying to execute add :[LDAP: error code 19 - 2081: AtrErr: DSID-03151122, #1: 0: 2081: DSID-03151122, problem 1005

RE: CFLdap and CF8

2008-04-15 Thread Dawson, Michael
I don't recall anything changing with LDAP in CF8. However, I don't use CFLDAP to create LDAP objects. Have you changed the underlying JVM version with the upgrade to CF8? m!ke -Original Message- From: Chad Gray [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 15, 2008 1:18 PM To: CF

RE: CFLdap and CF8

2008-04-15 Thread Chad Gray
We did an upgrade from 7 to 8. Nothing special. -Original Message- From: Dawson, Michael [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 15, 2008 2:46 PM To: CF-Talk Subject: RE: CFLdap and CF8 I don't recall anything changing with LDAP in CF8. However, I don't use CFLDAP to create

  1   2   3   4   5   6   >