LDAP and ASP - Problem

[Treml Juergen]

Hi,

i have a (little) Problem with connecting to the LDAP
Server.

I need to get a list of all Users and there LoginNames in
the companie's activedirectory.

The following code works in an normal vbs script:
Set oContainer=GetObject("LDAP://OU=sar-
dgf,DC=sar,DC=intern")

But when I use this code in an asp page on the sam
comptuer, i get an internal server error.

So i have tried this code:
Set X = GetObject("LDAP://mail/dc=sar,dc=intern")
for each Member in X
response.write(Member.Name & "<br>")
next

With this code i at least get back something, which
is 'CN=System' and 'CN=BuiltIn', but i do not get any
userlist or grouplist at all.

Does anyone know how to solve this problem? As i said the
script with the command above works, but not the asp page
with the same command on the sam computer.

Google dindn't help me at all, so i hope that anyone of
you ever had that problem and also solved it.

Thxx

[Boris Nikolaevich]

I'm guessing that it's because you need to use Server.CreateObject() instead
of GetObject() for your ASP script...


"Treml Juergen" <juergentreml@sar-gmbh.com> wrote in message
news:13fc01c381e0$3a785d50$a301280a@phx.gbl...

> Hi,
>
> i have a (little) Problem with connecting to the LDAP
> Server.
>
> I need to get a list of all Users and there LoginNames in
> the companie's activedirectory.
>
> The following code works in an normal vbs script:
> Set oContainer=GetObject("LDAP://OU=sar-
> dgf,DC=sar,DC=intern")
>
> But when I use this code in an asp page on the sam
> comptuer, i get an internal server error.
>
> So i have tried this code:
> Set X = GetObject("LDAP://mail/dc=sar,dc=intern")
> for each Member in X
> response.write(Member.Name & "<br>")
> next
>
> With this code i at least get back something, which
> is 'CN=System' and 'CN=BuiltIn', but i do not get any
> userlist or grouplist at all.
>
> Does anyone know how to solve this problem? As i said the
> script with the command above works, but not the asp page
> with the same command on the sam computer.
>
> Google dindn't help me at all, so i hope that anyone of
> you ever had that problem and also solved it.
>
> Thxx
>

[Treml Juergen]

Thxx for your answer. I tried what you said, but i
doesn't, as i expected, not work.

This isn't a object i want to be created by the server. It
is an object that already exists, which i want to get
information from, though not Create but Get.

>-----Original Message-----
>I'm guessing that it's because you need to use

Server.CreateObject() instead

>of GetObject() for your ASP script...
>
>
>"Treml Juergen" <juergentreml@sar-gmbh.com> wrote in

message

>news:13fc01c381e0$3a785d50$a301280a@phx.gbl...

>> Hi,
>>
>> i have a (little) Problem with connecting to the LDAP
>> Server.
>>
>> I need to get a list of all Users and there LoginNames

in

>> the companie's activedirectory.
>>
>> The following code works in an normal vbs script:
>> Set oContainer=GetObject("LDAP://OU=sar-
>> dgf,DC=sar,DC=intern")
>>
>> But when I use this code in an asp page on the sam
>> comptuer, i get an internal server error.
>>
>> So i have tried this code:
>> Set X = GetObject("LDAP://mail/dc=sar,dc=intern")
>> for each Member in X
>> response.write(Member.Name & "<br>")
>> next
>>
>> With this code i at least get back something, which
>> is 'CN=System' and 'CN=BuiltIn', but i do not get any
>> userlist or grouplist at all.
>>
>> Does anyone know how to solve this problem? As i said

the

>> script with the command above works, but not the asp

page

>> with the same command on the sam computer.
>>
>> Google dindn't help me at all, so i hope that anyone of
>> you ever had that problem and also solved it.
>>
>> Thxx
>>

>
>
>.
>

[Treml Juergen]

ok, i found the problem myself now, but this leads me to
another one:

the problem was: IIS authenticates towards ActiveDirectory
as anonynous which has not the rights to read AD entries.

but allowing anonymous user to do so is not really a
solution. a better one would be, to make IIS authenticate
towards AD as a certain user (e.g. Admin).

does anyone know how to do this?

thxx

>-----Original Message-----
>I'm guessing that it's because you need to use

Server.CreateObject() instead

>of GetObject() for your ASP script...
>
>
>"Treml Juergen" <juergentreml@sar-gmbh.com> wrote in

message

>news:13fc01c381e0$3a785d50$a301280a@phx.gbl...

>> Hi,
>>
>> i have a (little) Problem with connecting to the LDAP
>> Server.
>>
>> I need to get a list of all Users and there LoginNames

in

>> the companie's activedirectory.
>>
>> The following code works in an normal vbs script:
>> Set oContainer=GetObject("LDAP://OU=sar-
>> dgf,DC=sar,DC=intern")
>>
>> But when I use this code in an asp page on the sam
>> comptuer, i get an internal server error.
>>
>> So i have tried this code:
>> Set X = GetObject("LDAP://mail/dc=sar,dc=intern")
>> for each Member in X
>> response.write(Member.Name & "<br>")
>> next
>>
>> With this code i at least get back something, which
>> is 'CN=System' and 'CN=BuiltIn', but i do not get any
>> userlist or grouplist at all.
>>
>> Does anyone know how to solve this problem? As i said

the

>> script with the command above works, but not the asp

page

>> with the same command on the sam computer.
>>
>> Google dindn't help me at all, so i hope that anyone of
>> you ever had that problem and also solved it.
>>
>> Thxx
>>

>
>
>.
>

[Ray at]

Don't you have this same thread going on in asp.db?

Ray at work

"Treml Juergen" <juergentreml@sar-gmbh.com> wrote in message
news:028301c381ef$7f82c7f0$a301280a@phx.gbl...

> ok, i found the solution to the problem on my own a few
> minutes ago, but this led me to another one:
>
> the problem was: IIS authenticates towards ActiveDirectory
> as anonynous which has not the rights to read AD entries.
>
> but allowing anonymous user to do so is not really a
> solution. a better one would be, to make IIS authenticate
> towards AD as a certain user (e.g. Admin).
>
> does anyone know how to do this?
>
> thxx
>
>
>

> >-----Original Message-----
> >Hi,
> >
> >i have a (little) Problem with connecting to the LDAP
> >Server.
> >
> >I need to get a list of all Users and there LoginNames in
> >the companie's activedirectory.
> >
> >The following code works in an normal vbs script:
> >Set oContainer=GetObject("LDAP://OU=sar-
> >dgf,DC=sar,DC=intern")
> >
> >But when I use this code in an asp page on the sam
> >comptuer, i get an internal server error.
> >
> >So i have tried this code:
> >Set X = GetObject("LDAP://mail/dc=sar,dc=intern")
> >for each Member in X
> > response.write(Member.Name & "<br>")
> >next
> >
> >With this code i at least get back something, which
> >is 'CN=System' and 'CN=BuiltIn', but i do not get any
> >userlist or grouplist at all.
> >
> >Does anyone know how to solve this problem? As i said the
> >script with the command above works, but not the asp page
> >with the same command on the sam computer.
> >
> >Google dindn't help me at all, so i hope that anyone of
> >you ever had that problem and also solved it.
> >
> >Thxx
> >
> >.
> >

[Tom B]

In IIS administrator, right click your application and select properties, on
the directory security tab click the "edit" button next to Anonymous Access.
Enter the username and password of the account you'd like IIS to run under


"Treml Juergen" <juergentreml@sar-gmbh.com> wrote in message
news:025501c381ef$39fa2ed0$a301280a@phx.gbl...

> ok, i found the problem myself now, but this leads me to
> another one:
>
> the problem was: IIS authenticates towards ActiveDirectory
> as anonynous which has not the rights to read AD entries.
>
> but allowing anonymous user to do so is not really a
> solution. a better one would be, to make IIS authenticate
> towards AD as a certain user (e.g. Admin).
>
> does anyone know how to do this?
>
> thxx
>
>

> >-----Original Message-----
> >I'm guessing that it's because you need to use

> Server.CreateObject() instead

> >of GetObject() for your ASP script...
> >
> >
> >"Treml Juergen" <juergentreml@sar-gmbh.com> wrote in

> message

> >news:13fc01c381e0$3a785d50$a301280a@phx.gbl...

> >> Hi,
> >>
> >> i have a (little) Problem with connecting to the LDAP
> >> Server.
> >>
> >> I need to get a list of all Users and there LoginNames

> in

> >> the companie's activedirectory.
> >>
> >> The following code works in an normal vbs script:
> >> Set oContainer=GetObject("LDAP://OU=sar-
> >> dgf,DC=sar,DC=intern")
> >>
> >> But when I use this code in an asp page on the sam
> >> comptuer, i get an internal server error.
> >>
> >> So i have tried this code:
> >> Set X = GetObject("LDAP://mail/dc=sar,dc=intern")
> >> for each Member in X
> >> response.write(Member.Name & "<br>")
> >> next
> >>
> >> With this code i at least get back something, which
> >> is 'CN=System' and 'CN=BuiltIn', but i do not get any
> >> userlist or grouplist at all.
> >>
> >> Does anyone know how to solve this problem? As i said

> the

> >> script with the command above works, but not the asp

> page

> >> with the same command on the sam computer.
> >>
> >> Google dindn't help me at all, so i hope that anyone of
> >> you ever had that problem and also solved it.
> >>
> >> Thxx
> >>

> >
> >
> >.
> >

[Ray at]

Don't you have this same thread going on in asp.components?

Ray at work

"Treml Juergen" <juergentreml@sar-gmbh.com> wrote in message
news:028301c381ef$7f82c7f0$a301280a@phx.gbl...

> ok, i found the solution to the problem on my own a few
> minutes ago, but this led me to another one:
>
> the problem was: IIS authenticates towards ActiveDirectory
> as anonynous which has not the rights to read AD entries.
>
> but allowing anonymous user to do so is not really a
> solution. a better one would be, to make IIS authenticate
> towards AD as a certain user (e.g. Admin).
>
> does anyone know how to do this?
>
> thxx
>
>
>

> >-----Original Message-----
> >Hi,
> >
> >i have a (little) Problem with connecting to the LDAP
> >Server.
> >
> >I need to get a list of all Users and there LoginNames in
> >the companie's activedirectory.
> >
> >The following code works in an normal vbs script:
> >Set oContainer=GetObject("LDAP://OU=sar-
> >dgf,DC=sar,DC=intern")
> >
> >But when I use this code in an asp page on the sam
> >comptuer, i get an internal server error.
> >
> >So i have tried this code:
> >Set X = GetObject("LDAP://mail/dc=sar,dc=intern")
> >for each Member in X
> > response.write(Member.Name & "<br>")
> >next
> >
> >With this code i at least get back something, which
> >is 'CN=System' and 'CN=BuiltIn', but i do not get any
> >userlist or grouplist at all.
> >
> >Does anyone know how to solve this problem? As i said the
> >script with the command above works, but not the asp page
> >with the same command on the sam computer.
> >
> >Google dindn't help me at all, so i hope that anyone of
> >you ever had that problem and also solved it.
> >
> >Thxx
> >
> >.
> >

[Treml Juergen]

so far so good

but if i do what you suggest, everyone can use this asp
page. i need to make sure two things:

1) only members of the same domain can view the asp page
(I need their logins for certain purposes)

2)IIS authenticates towards ActiveDirectory as either the
user wich is viewing the page or a certain user which i
can define (which one of the two solutions doesn't matter)

the only problem i have is to make step 1 and 2 work at
the same time.

any solution for that?

>-----Original Message-----
>In IIS administrator, right click your application and

select properties, on

>the directory security tab click the "edit" button next

to Anonymous Access.

>Enter the username and password of the account you'd like

IIS to run under

>
>
>"Treml Juergen" <juergentreml@sar-gmbh.com> wrote in

message

>news:025501c381ef$39fa2ed0$a301280a@phx.gbl...

>> ok, i found the problem myself now, but this leads me to
>> another one:
>>
>> the problem was: IIS authenticates towards

ActiveDirectory

>> as anonynous which has not the rights to read AD

entries.

>>
>> but allowing anonymous user to do so is not really a
>> solution. a better one would be, to make IIS

authenticate

>> towards AD as a certain user (e.g. Admin).
>>
>> does anyone know how to do this?
>>
>> thxx
>>
>>

>> >-----Original Message-----
>> >I'm guessing that it's because you need to use

>> Server.CreateObject() instead

>> >of GetObject() for your ASP script...
>> >
>> >
>> >"Treml Juergen" <juergentreml@sar-gmbh.com> wrote in

>> message

>> >news:13fc01c381e0$3a785d50$a301280a@phx.gbl...
>> >> Hi,
>> >>
>> >> i have a (little) Problem with connecting to the LDAP
>> >> Server.
>> >>
>> >> I need to get a list of all Users and there

LoginNames

>> in

>> >> the companie's activedirectory.
>> >>
>> >> The following code works in an normal vbs script:
>> >> Set oContainer=GetObject("LDAP://OU=sar-
>> >> dgf,DC=sar,DC=intern")
>> >>
>> >> But when I use this code in an asp page on the sam
>> >> comptuer, i get an internal server error.
>> >>
>> >> So i have tried this code:
>> >> Set X = GetObject("LDAP://mail/dc=sar,dc=intern")
>> >> for each Member in X
>> >> response.write(Member.Name & "<br>")
>> >> next
>> >>
>> >> With this code i at least get back something, which
>> >> is 'CN=System' and 'CN=BuiltIn', but i do not get any
>> >> userlist or grouplist at all.
>> >>
>> >> Does anyone know how to solve this problem? As i said

>> the

>> >> script with the command above works, but not the asp

>> page

>> >> with the same command on the sam computer.
>> >>
>> >> Google dindn't help me at all, so i hope that anyone

of

>> >> you ever had that problem and also solved it.
>> >>
>> >> Thxx
>> >>
>> >
>> >
>> >.
>> >

>
>
>.
>