Re: CFLDAP socket closed error against SSL

2013-12-18 Thread Dave Watts
> Used LDAP Browser and it fails with the following message: > > CA certificate is not in the server certificate chain > > So I've used the keytool to import the all three: > > 1 - Comodo CA > 2 - the intermediate/root cert of the server > 3 - the cert of the server itself. > > Restarted and it st

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
rking fine. >>>>>> >>>>>> Once I added port = "636" to that code, exact same response: socket >> closed >>>>>> Again, the LDAPS (636) port is open to the ColdFusion server. >>>>>> >>>>>>

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dave Watts
> That's only necessary if the certificate from the LDAP server isn't > signed by a known CA. (e.g. it's self-signed.) ... or signed by a root CA that's not in the keystore - this happens fairly commonly in my experience. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Mahcsig
27;s an SSL issue. What steps need to be taken to ensure > >>>> LDAPS communication works? > >>>> > >>>> Thanks! > >>>> > >>>> Dan > >>>> > >>>> On 12/10/2013 12:36 PM, Dan LeGate wrote: > &g

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
>>>> >>>> Dan >>>> >>>> On 12/10/2013 12:36 PM, Dan LeGate wrote: >>>>> Here's the weirdness I'm experiencing... >>>>> >>>>> I have a Custom Tag we've been using for years that is called from mos

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread .jonah
>> I have a Custom Tag we've been using for years that is called from most >>>> of our applications and authenticates them to a Sun LDAP server. >>>> >>>> We are moving to an Active Directory service, and when I attempt to do a >>>> bin

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
ticates them to a Sun LDAP server. >>> >>> We are moving to an Active Directory service, and when I attempt to do a >>> bind against the new system, I get: >>> >>> An error has occurred while trying to execute query :servername.com:636; >>> socket

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread .jonah
orks? >>>> >>>> Thanks! >>>> >>>> Dan >>>> >>>> On 12/10/2013 12:36 PM, Dan LeGate wrote: >>>>> Here's the weirdness I'm experiencing... >>>>> >>>>> I have a Custom Tag we

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread .jonah
... >>>> >>>> I have a Custom Tag we've been using for years that is called from most >>>> of our applications and authenticates them to a Sun LDAP server. >>>> >>>> We are moving to an Active Directory service, and when I attempt to d

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Russ Michaels
he weirdness I'm experiencing... > >>> > >>> I have a Custom Tag we've been using for years that is called from most > >>> of our applications and authenticates them to a Sun LDAP server. > >>> > >>> We are moving to an Active Di

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
I'm experiencing... >>> >>> I have a Custom Tag we've been using for years that is called from most >>> of our applications and authenticates them to a Sun LDAP server. >>> >>> We are moving to an Active Directory service, and when I attempt to do a >

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Russ Michaels
from most > > of our applications and authenticates them to a Sun LDAP server. > > > > We are moving to an Active Directory service, and when I attempt to do a > > bind against the new system, I get: > > > > An error has occurred while trying to execute query :s

RE: CFLDAP socket closed error against SSL

2013-12-10 Thread Robert Harrison
.com Blog: http://www.austin-williams.com/blog Twitter: http://www.twitter.com/austin_williams -Original Message- From: Dan LeGate [mailto:d...@legeek.com] Sent: Tuesday, December 10, 2013 3:50 PM To: cf-talk Subject: Re: CFLDAP socket closed error against SSL I take it back... e

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
ervername.com:636; > socket closed. > > However, if I run that SAME cfldap command in a .cfm file out in a > regular web folder (i.e. not as a Custom Tag under the ColdFusion > directory), it works fine! > > I have restarted the server to make sure any old Custom Tag code isn

CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
tem, I get: An error has occurred while trying to execute query :servername.com:636; socket closed. However, if I run that SAME cfldap command in a .cfm file out in a regular web folder (i.e. not as a Custom Tag under the ColdFusion directory), it works fine! I have restarted the server to ma

Re: CFLDAP Lookups vs Binds?

2013-11-19 Thread Dan LeGate
Anyone doing this? On 11/7/2013 4:49 PM, Dan LeGate wrote: > Am I performing my queries vs binds correctly? > > This is my lookup query: > >name = "GetInfo" > start = "ou=people,dc=ad,dc=institution,dc=edu" > filter = "(|(samAccountName=dx7668))" > attribu

CFLDAP Lookups vs Binds?

2013-11-07 Thread Dan LeGate
Am I performing my queries vs binds correctly? This is my lookup query: And this is the bind attempt... only thing different is no filter (and the name, of course) Is that the proper way to do a bind vs a lookup? This is in CF7 (I know, I know). The reason I ask is that I'm seeing big di

Re: CFLDAP Fieldname Aliases?

2013-09-17 Thread Dan LeGate
Thanks Dave! This worked great. Dan On 9/16/2013 12:22 PM, Dave Watts wrote: >> Is there and equivalent to: >> >> select LName as Last_Name >> >> for CFLDAP? >> >> If not, what other workarounds are there to make those query results >> have th

Re: CFLDAP Fieldname Aliases?

2013-09-16 Thread Dave Watts
> Is there and equivalent to: > > select LName as Last_Name > > for CFLDAP? > > If not, what other workarounds are there to make those query results > have the names you want rather than the fieldnames from the LDAP server? > > cflooping over a QueryNew? Seems on

CFLDAP Fieldname Aliases?

2013-09-16 Thread Dan LeGate
Is there and equivalent to: select LName as Last_Name for CFLDAP? If not, what other workarounds are there to make those query results have the names you want rather than the fieldnames from the LDAP server? cflooping over a QueryNew? Seems onerous. Any advice/tips are appreciated. Thanks

Re: CFLDAP query attribute with multiple values

2010-11-02 Thread Azadi Saryev
very interesting - somehow i have missed the separator attribute of cfldap tag when checking its syntax... will try it first thing tomorrow morning. thanks for the tip, Mahcsig - i will post results (or more questions) tomorrow. On 02/11/2010 21:10 , Mahcsig wrote: > Are you using

Re: CFLDAP query attribute with multiple values

2010-11-02 Thread Mahcsig
Are you using the separator attribute? I use it to query active directory for user groups and it returns a list of all memberOf entries. I haven't tried it without the separator though. ~Mahcsig On Mon, Nov 1, 2010 at 7:38 PM, Azadi Saryev wrote: > > does cfldap tag support quer

CFLDAP query attribute with multiple values

2010-11-01 Thread Azadi Saryev
does cfldap tag support querying for an attribute with multiple values? it seems no matter what i do, it only returns the first value of an attribute... our school uses mac os x server ldap service (based on openldap), and some user attributes are multivalued, but cfldap only ever returns the

Re: Has anyone ever successfully changed an AD password through CFLDAP?!

2010-08-04 Thread Ivan Lazovic
: 0A 01 02 30 2E 04 0A 75 6E 69 63 6F 64 65 50 77 ...0...unicodePw >0060: 64 31 20 04 1E 22 00 6E 00 65 00 77 00 50 00 61 d1 ..".n.e.w.P.a >0070: 00 73 00 73 00 77 00 6F 00 72 00 64 00 31 00 21 .s.s.w.o.r.d.1.! >0080: 00 22 00 A0 1B 30 19 04 17 32 2E 31 36 2E 38 34 .".

Re: Has anyone ever successfully changed an AD password through CFLDAP?!

2010-05-27 Thread Matthew Small
already figured this out though. - Matt Small >I've read everything I can find on the internet about using CFLDAP to >reset/change an Active Directory password, and every thread trails off with >no success. > >I've been working on this for the last several days, and I've

Has anyone ever successfully changed an AD password through CFLDAP?!

2010-05-21 Thread Smith, Ed
I've read everything I can find on the internet about using CFLDAP to reset/change an Active Directory password, and every thread trails off with no success. I've been working on this for the last several days, and I've come to be convinced that its impossible to reset a user&#

Re: Use CFLDAP to retrieve list of groups user belongs to

2010-01-28 Thread Dawn Sekel
That Worked! Thank you. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330246

RE: Use CFLDAP to retrieve list of groups user belongs to

2010-01-28 Thread Jon Sala
--- From: Dawn Sekel [mailto:dse...@ciber.com] Sent: Thursday, January 28, 2010 12:12 PM To: cf-talk Subject: Use CFLDAP to retrieve list of groups user belongs to Hi: I currently use this command to authenticate a user against our AD. My IT manager wants me to now allow users to acc

Use CFLDAP to retrieve list of groups user belongs to

2010-01-28 Thread Dawn Sekel
that will return a string of all the groups the user belongs to in the "results" query? Or would I have to use a second follow on CFLDAP query? Would anyone be able to share an example? Thanks in advance of any advice. ~~

Re: CFLDAP & SSL

2009-12-08 Thread Tom Jones
Yes, you have to install the cert, and you have to restart the cfm service as well. The other thing I'm not seeing in your cfldap tag is the port. If it's missing it's will default to 389 not the standard 636 for ssl. tom On Dec 8, 2009, at 8:50 AM, Jake Churchill wrote: >

Re: CFLDAP & SSL

2009-12-08 Thread Dave Watts
> All attributes are correct and for testing I'm attempting a simple query > with * for attributes and maxrows of 10.  Snippet below.  Everything is > straight from the IT staff that controls the LDAP server.  I read this > article: http://kb2.adobe.com/cps/191/tn_19139.html#enableCF which stated

CFLDAP & SSL

2009-12-08 Thread Jake Churchill
I'm working on an SSL integration of CFLDAP for a client and am consistently getting "Connection to LDAP server failed." All attributes are correct and for testing I'm attempting a simple query with * for attributes and maxrows of 10. Snippet below. Everything is straig

Re: Recursive CFLDAP calls

2009-11-16 Thread charlie griefer
tty extensive use out of >CFLDAP (which I've maybe used twice prior to this job). One task is to >write a method that gets users by group. Problem is, some of the group >members are groups themselves. > >The request came in to recurse over the results and check each one to see

Recursive CFLDAP calls

2009-11-16 Thread Charlie Griefer
Hi All: I'm in the middle of a contract that's making pretty extensive use out of CFLDAP (which I've maybe used twice prior to this job). One task is to write a method that gets users by group. Problem is, some of the group members are groups themselves. The request came in

Re: Decipher CFLDAP date values

2009-08-04 Thread Wally Randall
SOLVED: This code shows how to translate the LDAP dates returned by ColdFusion tag cfldap and to determine the number of days since the password was last changed. It is based on code found on Scott Pinkston's blog: http://www.scottpinkston.org/blog/index.cfm/2009/1/3/Detecting-passwor

Re: Decipher CFLDAP date values

2009-08-04 Thread Wally Randall
That formula is still not correct: adexplorer shows this date: 7/2/2009 12:33:05 PM cfldap returns this integer8 value: 128910259851092856 The coldfusion code shown below returns this date: January 07, 1601 09:47:01 --- #dateFormat(iLogonTime," dd,

RE: Decipher CFLDAP date values

2009-08-03 Thread Dawson, Michael
http://cflib.org/udf/convertActiveDirectoryTime _ From: Dave Phillips [mailto:experiencedcfdevelo...@gmail.com] Sent: Fri 7/31/2009 10:34 PM To: cf-talk Subject: RE: Decipher CFLDAP date values Wally, I don't know if you figured this out yet or not, but using this page:

RE: Decipher CFLDAP date values

2009-07-31 Thread Dave Phillips
#x27;t know what the correct date/time stamp actually is: #dateFormat(iLogonTime," dd, ")# #timeFormat(iLogonTime,"hh:mm:ss")# Dave Phillips -Original Message- From: Wally Randall [mailto:wally.rand...@comcast.net] Sent: Friday, July 31, 2009 3:31 PM To: cf-t

Re: Decipher CFLDAP date values

2009-07-31 Thread Dave Watts
> When returning date/time values from active directory the CFLDAP tag provides > an > integer value which must be decoded.  What is the formula for converting the > integer > value to a human readable date? > > example:  LASTLOGON returns "128922162522263907&q

Decipher CFLDAP date values

2009-07-31 Thread Wally Randall
When returning date/time values from active directory the CFLDAP tag provides an integer value which must be decoded. What is the formula for converting the integer value to a human readable date? example: LASTLOGON returns "1289221625222

RE: CFLDAP and tokengroups

2009-06-23 Thread Dawson, Michael
I have not yet found a solution, but I have not worked on it much since the last writing of this thread. Thanks, Mike -Original Message- From: John J [mailto:johnv20...@yahoo.com] Sent: Tuesday, June 23, 2009 3:48 PM To: cf-talk Subject: Re: CFLDAP and tokengroups Hi - I see this

Re: CFLDAP and tokengroups

2009-06-23 Thread John J
Hi - I see this mentioned: >I am in more than one group, so I don't think the CFLDAP results are >correct. >>I have asked some Adobe reps to confirm if multi-value, binary >attributes are being handled correctly. It is possible that the >returnasbinary option does

Re: Strange CFLdap Active Directory issue

2009-06-17 Thread Ian Skinner
Dave Watts wrote: > Are other members of the proper group able to access the content? That > is, is it a user problem or a group problem? > > Can you monitor the LDAP traffic and see what's going on? > http://justgeeks.blogspot.com/2009/05/using-wireshark-to-sniff-active.html > > Dave Watts, CTO,

RE: Strange CFLdap Active Directory issue

2009-06-17 Thread Dawson, Michael
2009 1:33 PM To: cf-talk Subject: Strange CFLdap Active Directory issue We have a intermittent strange issue using cfldap to access user's active directory records. We use this on web resources secured with Windows Integrated Security in IIS. The ColdFusion code then uses the cgi.auth_user val

Re: Strange CFLdap Active Directory issue

2009-06-17 Thread Dave Watts
> This all works as expected with the majority of the users.  The trouble > is that for four users, they are denied access to content, even though > everything we can look at says they are members of the proper group. > > Can anybody provide suggestions on what places we should investigate > this

Strange CFLdap Active Directory issue

2009-06-17 Thread Ian Skinner
We have a intermittent strange issue using cfldap to access user's active directory records. We use this on web resources secured with Windows Integrated Security in IIS. The ColdFusion code then uses the cgi.auth_user value to read the users ldap record and parses out the groups of

RE: CFLDAP and tokengroups

2009-02-27 Thread Dawson, Michael
...@yahoo.com] Sent: Friday, February 27, 2009 11:49 AM To: cf-talk Subject: Re: CFLDAP and tokengroups Interesting... The scope="base" is what is killing mine. I'm not sure if I need to change my START value or what??? According to docs: oneLevel: entries one level below entry.

Re: CFLDAP and tokengroups

2009-02-27 Thread Jeff Becker
Interesting... The scope="base" is what is killing mine. I'm not sure if I need to change my START value or what??? According to docs: oneLevel: entries one level below entry. == DEFAULT base: only the entry. But not exactly sure what that means.. in any regard, I'm getting closer and close

RE: CFLDAP and tokengroups

2009-02-27 Thread Dawson, Michael
This is what my dumps are. http://acelinkdev.evansville.edu/activedirectory/groups/tokengroups.cfm I am in more than one group, so I don't think the CFLDAP results are correct. I have asked some Adobe reps to confirm if multi-value, binary attributes are being handled correctly.

Re: CFLDAP and tokengroups

2009-02-27 Thread Jeff Becker
Good man!! WOW! My CFDUMP isn't returning anything... but the code is indeed functioning. Is your CFDUMP empty or displaying something?? I may need to play with my filter. My AD Contact says we would now have each groups SID (Security Identifier). With that, its a matter of then querying f

RE: CFLDAP and tokengroups

2009-02-27 Thread Dawson, Michael
I figured it out, somewhat. In CFLDAP, the START attribute must be the distinguishedName of the object you want to inspect. The SCOPE must be set to BASE. Here is a working example (add your server and authentication info): The solution was on pg 138 (gray callout) in: http

RE: CFLDAP and tokengroups

2009-02-27 Thread Dawson, Michael
lar errors. Each of these attributes are active in AD. This sucks because I would really like to research this attribute. Thanks, Mike -Original Message- From: Jeff Becker [mailto:jpbec...@yahoo.com] Sent: Friday, February 27, 2009 9:22 AM To: cf-talk Subject: Re: CFLDAP and tokengroups

Re: CFLDAP and tokengroups

2009-02-27 Thread Jeff Becker
doesn't = DOES :) ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-ta

Re: CFLDAP and tokengroups

2009-02-27 Thread Jeff Becker
Michael, Thanks for your thoughts. The big task at hand is to get all a user's groups and most importantly recursively go up the chain. So for example, user jbecker is apart of AD GROUP "San Fran", that group is apart of "California Users", and that group is apart of "All Corporate Users". -

RE: CFLDAP and tokengroups

2009-02-27 Thread Dawson, Michael
t: Friday, February 27, 2009 8:24 AM To: cf-talk Subject: CFLDAP and tokengroups Good morning, I have the following code to attempt to get at a users' groups the most efficient way. When attempting to run, I'm getting the following error: An error has occured while trying to execu

CFLDAP and tokengroups

2009-02-27 Thread Jeff Becker
Good morning, I have the following code to attempt to get at a users' groups the most efficient way. When attempting to run, I'm getting the following error: An error has occured while trying to execute query :[LDAP: error code 1 - 2120: SvcErr: DSID-03140262, problem 5012 (DIR_ERROR),

RE: Proper Authentication with CFLDAP?

2008-10-24 Thread Dawson, Michael
AD is closest to #2 in your list. Mike -Original Message- From: Shannon Peevey [mailto:[EMAIL PROTECTED] Sent: Friday, October 24, 2008 8:54 AM To: cf-talk Subject: Re: Proper Authentication with CFLDAP? There are three types of binds that a LDAP server can be configured for: 1

Re: Proper Authentication with CFLDAP?

2008-10-24 Thread Shannon Peevey
Message- > From: Marie Taylore [mailto:[EMAIL PROTECTED] > Sent: Thursday, October 23, 2008 4:01 PM > To: cf-talk > Subject: Proper Authentication with CFLDAP? > > I just received this code as the "proper" way to "bind" someone during > an LDAP login to a C

RE: Proper Authentication with CFLDAP?

2008-10-24 Thread Dawson, Michael
on. You already know the UserIsValid variable is 0. Mike -Original Message- From: Marie Taylore [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2008 4:01 PM To: cf-talk Subject: Proper Authentication with CFLDAP? I just received this code as the "proper" way to "

Re: Proper Authentication with CFLDAP?

2008-10-23 Thread Shannon Peevey
Yes, this would let you know that they are authenticated. It assumes that you LDAP server allows users to read from the tree. I'm not sure about using the full DN to the object with the start key. I always use the people container. Here is my example: Don't forget to authorize the user

Proper Authentication with CFLDAP?

2008-10-23 Thread Marie Taylore
I just received this code as the "proper" way to "bind" someone during an LDAP login to a ColdFusion App. Is this really the right way? Sorry, login failed. If they pass the CFABORT above, they're "authenticated" to

RE: CFLDAP to Update altRecipient in Active Directoy / Exchange

2008-10-23 Thread Dawson, Michael
Good catch. Glad to help. Mike -Original Message- From: Dennis Hughes [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2008 1:35 PM To: cf-talk Subject: Re: CFLDAP to Update altRecipient in Active Directoy / Exchange I have it now ... Changed the delimiter and separator to

Re: CFLDAP to Update altRecipient in Active Directoy / Exchange

2008-10-23 Thread Dennis Hughes
I have it now ... Changed the delimiter and separator to ";" for the altRecipientBL add, then used a second cfldap modify to update the deliverAndRedirect but instead of the modifytype being add it needed to be Replace. I used the delimiter as ";" and the separator

Re: CFLDAP to Update altRecipient in Active Directoy / Exchange

2008-10-23 Thread Dennis Hughes
Just gave this a shot and getting the same error. I changed the code so that I am only dealing with the altRecipientBL now and not trying to complicate things. Tried both the Pike and the Tab - error results were the same. Here is the updated code: >I think it may be the commas in your DN t

RE: CFLDAP to Update altRecipient in Active Directoy / Exchange

2008-10-23 Thread Dawson, Michael
, try SEPARATOR. (I can never remember which one does what.) ;^) Heck, go ahead and set both DELIMITER and SEPARATOR to a tab. It doesn't hurt a thing. Mike -Original Message- From: Dennis Hughes [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2008 12:36 PM To: cf-talk Subject:

Re: CFLDAP to Update altRecipient in Active Directoy / Exchange

2008-10-23 Thread Dennis Hughes
I just tried the altRecipientBL and ended up with the similar LDAP 19 error that I was getting before. Error is: An error has occured while trying to execute modify :[LDAP: error code 19 - 20B1: AtrErr: DSID-030F0C1A, #1: 0: 20B1: DSID-030F0C1A, problem 1005 (CONSTRAINT_ATT_TYPE), data

RE: CFLDAP to Update altRecipient in Active Directoy / Exchange

2008-10-23 Thread Dawson, Michael
Instead of altRecipient, try altRecipientBL. mike -Original Message- From: Dennis Hughes [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2008 11:23 AM To: cf-talk Subject: CFLDAP to Update altRecipient in Active Directoy / Exchange I am totally stumped on how I can update the

CFLDAP to Update altRecipient in Active Directoy / Exchange

2008-10-23 Thread Dennis Hughes
I am totally stumped on how I can update the altRecipient field that is present within our Active Directory Contacts through the General Exchange tab. I can toggle on and off the deliverAndRedirect check box, but I am unable to add anything to the altRecipient field (which should be the DN of t

RE: CFLDAP different number of results on same search?

2008-10-10 Thread Dawson, Michael
Remove the timeout attribute and it should work fine. I never use the CFLDAP timeout attribute. I let the page's timeout value control that. I figure if the ldap query times-out, then the results are no good (since they vary so much) and the entire page may as well fail. Mike -Ori

Re: CFLDAP different number of results on same search?

2008-10-09 Thread Aaron Rouse
ve seen that behaviour when the query times out. It just returns > >>> whatever it's collected in within the timeout period and gives up. > >>> Only solution I found was to crank up the timeout value until that > >>> didn't happen anymore and hope

Re: CFLDAP different number of results on same search?

2008-10-09 Thread Dan LeGate
in within the timeout period and gives up. >>> Only solution I found was to crank up the timeout value until that >>> didn't happen anymore and hope for the best. >>> >>> cheers, >>> barneyb >>> >>> On Thu, Oct 9, 2008 at 4:13 PM, Dan LeG

Re: CFLDAP different number of results on same search?

2008-10-09 Thread Dan LeGate
tion I found was to crank up the timeout value until that >> didn't happen anymore and hope for the best. >> >> cheers, >> barneyb >> >> On Thu, Oct 9, 2008 at 4:13 PM, Dan LeGate <[EMAIL PROTECTED]> wrote: >> >>> I have a CFLDAP query

Re: CFLDAP different number of results on same search?

2008-10-09 Thread Aaron Rouse
s to crank up the timeout value until that > didn't happen anymore and hope for the best. > > cheers, > barneyb > > On Thu, Oct 9, 2008 at 4:13 PM, Dan LeGate <[EMAIL PROTECTED]> wrote: > > I have a CFLDAP query that seems to be giving me a different number of >

Re: CFLDAP different number of results on same search?

2008-10-09 Thread Barney Boisvert
2008 at 4:13 PM, Dan LeGate <[EMAIL PROTECTED]> wrote: > I have a CFLDAP query that seems to be giving me a different number of > results every time I search for the same text with the same filter, > attributes, etc. > > Has anyone seen this behavior? Here's the code:

CFLDAP different number of results on same search?

2008-10-09 Thread Dan LeGate
I have a CFLDAP query that seems to be giving me a different number of results every time I search for the same text with the same filter, attributes, etc. Has anyone seen this behavior? Here's the code: This is a Sun LDAP server (v5.2). When I run queries with the command

RE: CFLDAP Query / Add/Modify Users in AD

2008-08-14 Thread Dawson, Michael
eSize". Don't make the value too large. I would suggest setting it a few hundred higher than your maximum amount of object that you want to query. For example, if you have 9,000 user objects, set maxPageSize to 10,000. 2. Look at the CFLDAP attributes of SEPARATOR and DELIMITER. Also, try

CFLDAP Query / Add/Modify Users in AD

2008-08-14 Thread Isidro Pimentel
Hello, I am trying to create a coldfusion that allows users to add a user/modify a user . I am able to add a user into AD with no problem. I am having difficulties with two things. 1. Query - How do I query AD for more than 1000 users. Currently when I query it I only get 1000 user in my resul

RE: cfldap error

2008-08-11 Thread Dawson, Michael
A DN begins with CN=, not DN= as in your code. Also, drop the parenthesis. Change your code to: dn="#qryLDAPUser.dn#"... m!ke _ From: Eclectic User [mailto:[EMAIL PROTECTED] Sent: Mon 8/11/2008 8:00 PM To: CF-Talk Subject: cfldap error When I run this coldf

cfldap error

2008-08-11 Thread Eclectic User
When I run this coldfusion code to delete LDAP user, I get LDAP Error 34. I am not sure what is wrong with the DN, please help me. Thanks for any help you provide. ~| Adobe® ColdFusion® 8 software 8 is the most important

Re: workarounds for cfldap & MS AD SSLv3 / TLSv1

2008-07-11 Thread Shannon Peevey
rity protection). > Unfortunately it appears as if the LDAP server will only accept SSLv3 > and TLSv1 and CF can at best use SSLv2. For a quick test I tunneled the > cfldap traffic over an stunnel connection (http://stunnel.org/) without > client certificates and that worked fine, but I w

workarounds for cfldap & MS AD SSLv3 / TLSv1

2008-07-11 Thread Jochem van Dieten
and CF can at best use SSLv2. For a quick test I tunneled the cfldap traffic over an stunnel connection (http://stunnel.org/) without client certificates and that worked fine, but I would rather not depend on that in a production environment. Any recommendations for an LDAP library that can do

RE: CFLDAP groups

2008-06-05 Thread Dawson, Michael
Original Message- From: Den Made [mailto:[EMAIL PROTECTED] Sent: Thursday, June 05, 2008 1:30 PM To: CF-Talk Subject: Re: CFLDAP groups Thanks Michael, I am using Sun Directory Server 6.0 on Windows 2003. I created a static group and Added users from different Organizational Units (Group Memb

Re: CFLDAP groups

2008-06-05 Thread Den Made
le,dc=comin" using the CFLDAP tag below but I am not finding the members, what am I doing wrong? ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doublecli

RE: CFLDAP groups

2008-06-05 Thread Dawson, Michael
r of the "MyGroup" domain group. (Edit the attributes as needed for your LDAP server.) If you post your exact issue, I can try to help more. m!ke -Original Message- From: Den Made [mailto:[EMAIL PROTECTED] Sent: Thursday, June 05, 2008 11:03 AM To: CF-Talk Subject: CFLDAP

CFLDAP groups

2008-06-05 Thread Den Made
I have run into a big problem setting and searching dynamic groups and was told static groups are the most supported and most understood. I created a static group and added some members; now I am trying to search for members of this group and am facing difficulties. This is the code I am using

RE: cfldap

2008-05-27 Thread Dave Watts
> I think that is only if he is changing a local computer > account's password. Domain accounts won't have that problem. Yeah, I think you're right about that. My mistake. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized

RE: cfldap

2008-05-27 Thread Dawson, Michael
From: Dave Watts [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 27, 2008 3:34 PM To: CF-Talk Subject: RE: cfldap > You can also run the CF service as a domain user with enough > permission to change a user's password. You won't need the old > password to do this. If you d

RE: cfldap

2008-05-27 Thread Dave Watts
> You can also run the CF service as a domain user with enough > permission to change a user's password. You won't need the > old password to do this. If you do this, though, you will break any access to local encrypted filesystems on that user's machine, I think. Dave Watts, CTO, Fig Leaf Sof

RE: cfldap

2008-05-27 Thread Dawson, Michael
ord to do this. m!ke -Original Message- From: Chad Gray [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 27, 2008 3:19 PM To: CF-Talk Subject: cfldap If I have the users old password can I change the password to somethin

cfldap

2008-05-27 Thread Chad Gray
If I have the users old password can I change the password to something new using CFLDAP? ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk

Re: CFLDAP Password expires

2008-05-20 Thread Keith McGee
Thank you for the infromation about pswLastChange, that lead me to this post http://www.houseoffusion.com/groups/cf-talk/thread.cfm/threadid:46206";>http://www.houseoffusion.com/groups/cf-talk/thread.cfm/threadid:46206 and the solution // parse value into minutes variables.calcLastLogon = v

RE: CFLDAP Password expires

2008-05-20 Thread Dawson, Michael
20, 2008 7:25 AM To: CF-Talk Subject: CFLDAP Password expires I wrote this app to display when a users password expires, it appears I am going of the wrong field, can someone direct me to the right field or let me know if I am way of

CFLDAP Password expires

2008-05-20 Thread Keith McGee
I wrote this app to display when a users password expires, it appears I am going of the wrong field, can someone direct me to the right field or let me know if I am way of base. Thanks, Keith ~| Adobe® ColdFu

Re: Catching and Displaying Errors with CFLDAP

2008-05-09 Thread Den Made
Thanks a bunch, I real appreciate your help, it worked just fine!!! > > > > > > > > > > > > > >Once you find the cfcatch struct var, use it in a CFIF block inside the >CFCATCH block. > >m!ke > >Error updating the server MyServer:389. The error is >javax.naming.directory.InvalidAttrib

Re: Catching and Displaying Errors with CFLDAP

2008-05-09 Thread Den Made
Thanks so much. I real appreciate your help!!! > Error updating the server MyServer:389. The error is javax.naming. > directory.InvalidAttributeValueException: [LDAP: error code 19 - > invalid password syntax: no special character]; remaining name > 'uid=testuser,ou=ME,dc=example,dc=com' > > I

RE: Catching and Displaying Errors with CFLDAP

2008-05-09 Thread Dawson, Michael
Once you find the cfcatch struct var, use it in a CFIF block inside the CFCATCH block. m!ke -Original Message- From: Den Made [mailto:[EMAIL PROTECTED] Sent: Friday, May 09, 2008 2:44 PM To: CF-Talk Subject: Catching and Displaying Errors with CFLDAP Error

Catching and Displaying Errors with CFLDAP

2008-05-09 Thread Den Made
Error updating the server MyServer:389. The error is javax.naming.directory.InvalidAttributeValueException: [LDAP: error code 19 - invalid password syntax: no special character]; remaining name 'uid=testuser,ou=ME,dc=example,dc=com' I am connecting to Sun One Directory Server 6.0 on Windows Ser

Re: CFLdap and CF8

2008-04-15 Thread James Blaha
Hi Chad, I'm using cf8, we didnt have any cfldap issues with AD or SunOne when I went from 7 to 8. There is a nocase option. -Jim ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Ge

RE: CFLdap and CF8

2008-04-15 Thread Chad Gray
s.LASTNAME#; -Original Message- From: Chad Gray [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 15, 2008 3:00 PM To: CF-Talk Subject: RE: CFLdap and CF8 We did an upgrade from 7 to 8. Nothing special. -Original Message- From: Dawson, Michael [mailto:[EMAIL PROTECTED] Sent: Tues

RE: CFLdap and CF8

2008-04-15 Thread Chad Gray
We did an upgrade from 7 to 8. Nothing special. -Original Message- From: Dawson, Michael [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 15, 2008 2:46 PM To: CF-Talk Subject: RE: CFLdap and CF8 I don't recall anything changing with LDAP in CF8. However, I don't use CFLDAP

  1   2   3   4   5   6   >