Accessing a user's domain via adam
I am using redmine (rails ticket management) and I would like users to be able to log in with their network user and password.
I followed the Microsoft ADAM walkthrough step by step and set up an ADAM instance on my local machine.
I have already managed to create a couple of adam accounts, set their password, and I will be able to connect to them from the rails app.
I had to enter the following conf in redmine:
host: localhost port: 369 account: CN = admin, OU = ADAM users, O = Microsoft, C = US (an adam administrator account I've created) password: xxx base DN: O = Microsoft, C = US (taken from the step by step guide) attribute to map to the name of the login: name
the problem is that I would like to be able to validate the domain users, not the user that I manually add to the adam database ...
So, I can already connect to the ldap server, how can I use it to check for domain accounts?
there is some way to achieve this.
- windows xp SP3
adam sp1
redmine 0.8.3
ruby 1.8.6 (2008-08-11 patchlevel 287) [i386-mswin32]
a source to share
You want "proxy authentication".
Description from the link below (my editorial comments are in bold):
What is proxy authentication? Proxy server authentication allows a user to perform simple bindings with an AD LDS (aka ADAM) for example, while maintaining a link to an Active Directory account.
Also see the "Binding Through the ADAM Proxy Object" section in the following link: Managing Authentication in ADAM
a source to share