Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Example of ASP LDAP query string? 14

Status
Not open for further replies.
MikeBronner

MikeBronner

Programmer
May 9, 2001
756
0
0
US
Could someone post an example of ASP code used to query LDAP without any proprietary components?

Thanks! Take Care,
Mike
 
Sort by date Sort by votes
How secure is this method? I'm using it for an intranet site that might have a need to move through an approval proceedure and I want to make sure it will be secure. Is there any way to spoof that server variable. I can't see how...but I want to check.

Thanks
 
Upvote 0 Downvote
no...I meant is there any way to spoof the server variables...like "auth_user". I can't hink of any but I'm not an expert.
 
Upvote 0 Downvote
What do you mean by "spoof the server variables"?
 
Upvote 0 Downvote
I mean is there any way to send false identification to the server so that the server variable "auth_user" is read as another account?
 
Upvote 0 Downvote
Zcolton i have a question.

the code that u gave me if i try to run locally on my computer it says

Error Type:
Provider (0x80040E37)
Table does not exist.

what does this mean? im such a newb
 
Upvote 0 Downvote
pReverend: I am not sure if that can be done.

peacecorp: These pages need to run on a web server. If you have a web server running on your machine and the machine is a domain member it should work.
 
Upvote 0 Downvote
i turned off anonymous authentication and checked on intergrated windows authentication.

i still get a error

Error Type:
Provider (0x80040E37)
Table does not exist.

its erroring on the line:
Set rs = Com.Execute
 
Upvote 0 Downvote
Try this code first:
If your webserver can access your domain this should show you your domain name
Code: 
<%@ Language=VBScript %>
<%
Option Explicit
Dim objADsPath,objDomain
%>
<html>
<head>
</head>
<body>
<%
Set objDomain = GetObject ("GC://RootDSE")
objADsPath = objDomain.Get("defaultNamingContext")
Set objDomain = Nothing
Response.Write objADsPath & "<BR>"
%>
</body>
</html>
 
Upvote 0 Downvote
domain works, and username sorta i did a test on it and that is fine. i even outputed teh com.CommandText and it looks flawless. just when it tries to do execute it doesnt work

sample output of ur original code minus the com.execute and on. i also changed it to output the commandText

output
---------------------------------------------
NTam
DC=sandc,DC=ws
select name,telephonenumber,mail from 'GC://DC=sandc,DC=ws' where sAMAccountname='NTam'
 
Upvote 0 Downvote
Are you running the latest version of MDAC on the server?
 
Upvote 0 Downvote
I found your problem. Turn off Integergrated Windows authentication and try basic. Let me know if that works.
 
Upvote 0 Downvote
OR --- You will need to hard code a domain account and password that has access to active directory:
That is what I usually do. I created a very low level domain account that as no access real network access except reading the active directory. If you plan on using this web pages in an intranet, with domain users logged in the access theses pages, that might be the easiest method for you.

Code: 
<%@ Language=VBScript %>
<%
Option Explicit
Dim strUsername,con,rs,Com,objADsPath,objDomain,name,telephonenumber,mail
%>
<html>
<head>
</head>
<body>
<%
strUsername = Request.ServerVariables("auth_user")
strUserName = Right(strUserName, Len(strUserName) - InStrRev(strUserName, "\"))
Set objDomain = GetObject ("GC://rootDSE")
objADsPath = objDomain.Get("defaultNamingContext")
Set objDomain = Nothing
Set con = Server.CreateObject("ADODB.Connection")
con.provider ="ADsDSOObject"
 con.Properties("User ID") = "some user name"
 con.Properties("Password") = "the password"
 con.Properties("Encrypt Password") = False
con.open "Active Directory Provider"
Set Com = CreateObject("ADODB.Command")
Set Com.ActiveConnection = con
Com.CommandText ="select name,telephonenumber,mail FROM 'GC://"+objADsPath+"' where sAMAccountname='"+strUsername+"'"
Set rs = Com.Execute
name=rs("name")
telephonenumber=rs("telephonenumber")
mail=rs("mail")
rs.Close
con.Close
Set rs = Nothing
Set con = Nothing
response.write name&"<br>"
response.write telephonenumber&"<br>"
response.write mail&"<br>"
%>
</body>
</html>
 
Upvote 0 Downvote
ok im gonna work with these 2 possible solutions and i will tell u how it goes later today thanks
 
Upvote 0 Downvote
Hey,

ok i tested things in steps:
STEP 1: WORKS fine
<%@ Language=VBScript %>
<%
Option Explicit
Dim strUsername,con,rs,Com,objADsPath,objDomain,name,telephonenumber,mail
%>
<html>
<head>
</head>
<body>
<%
strUsername = Request.ServerVariables("auth_user")
response.write strUsername&"<br>"
strUserName = Right(strUserName, Len(strUserName) - InStrRev(strUserName, "\"))
Set objDomain = GetObject ("GC://rootDSE")
objADsPath = objDomain.Get("defaultNamingContext")
Set objDomain = Nothing
Set con = Server.CreateObject("ADODB.Connection")
con.provider ="ADsDSOObject"
con.open "Active Directory Provider"
Set Com = CreateObject("ADODB.Command")
Set Com.ActiveConnection = con

response.write strUsername&"<br>"
response.write objADsPath&"<br>"

Com.CommandText ="select name,telephonenumber,mail FROM 'GC://"+objADsPath+"'

where sAMAccountname='"+strUsername+"'"


%>
</body>
</html>

STEP 2: i get a 500 http error

<%@ Language=VBScript %>
<%
Option Explicit
Dim strUsername,con,rs,Com,objADsPath,objDomain,name,telephonenumber,mail,WshShell
%>
<html>
<head>
</head>
<body>
<%

strUsername = Request.ServerVariables("auth_user")
response.write strUsername&"<br>"
strUserName = Right(strUserName, Len(strUserName) - InStrRev(strUserName, "\"))
Set objDomain = GetObject ("GC://rootDSE")
objADsPath = objDomain.Get("defaultNamingContext")
Set objDomain = Nothing
Set con = Server.CreateObject("ADODB.Connection")
con.provider ="ADsDSOObject"
con.open "Active Directory Provider"
Set Com = CreateObject("ADODB.Command")
Com.ActiveConnection = con
Set rs = Server.CreateObject("ADODB.Recordset")


response.write strUsername&"<br>"
response.write objADsPath&"<br>"

Com.CommandText ="select name,telephonenumber,mail from 'GC://"+objADsPath+"'where sAMAccountname='"+strUsername+"'"

response.write Com.CommandText&"<br>"


Set rs = Com.Execute
name=rs("name")
telephonenumber=rs("telephonenumber")
mail=rs("mail")
rs.Close
con.Close
Set rs = Nothing
Set con = Nothing

response.write name&"<br>"
response.write telephonenumber&"<br>"
response.write mail&"<br>"

%>
</body>
</html>


Is it possible that the com.CommandText = "..."
is some how not correct?
 
Upvote 0 Downvote
There should be a space before the "WHERE" in the Com.Commandtext
 
Upvote 0 Downvote
i tried it again....but it still gives teh same error.

Is it possible that the com.CommandText = "..."
is some how not correct?

like my domain is correct i asked my network admin and it contains all teh correct data could it be the values its trying to get like name, telephonenumber, mail?
 
Upvote 0 Downvote
To get a more specific error message turn off friendly error messages in IE. It's under the advanced tab. That might give us better insight as to why it is not working.
 
Upvote 0 Downvote
this is my error message:

TORONTO\NTam
NTam
DC=sandc,DC=ws
select name,telephonenumber,mail from 'GC://DC=Toronto,DC=sandc,DC=ws' where sAMAccountname='NTam'

Provider error '80040e37'

Table does not exist.

/helpdesk/test2.asp, line 34


the first 4 lines are just output....i had to hardcode part of the domain name
 
Upvote 0 Downvote
Status
Not open for further replies.

Similar threads

Vitor Fernandes-Neto
  • Locked
  • Question
Ldap authentication in classic asp, retrieving givenname, displayname etc
Replies
0
Views
159
Vitor Fernandes-Neto
Vitor Fernandes-Neto
jenalolo
  • Locked
  • Question
LDAP error
Replies
1
Views
118
jenalolo
jenalolo
CryptoTuke
  • Locked
  • Question
Maximum buffer size on Winsock for sending one block of data over TCP / IP
Replies
1
Views
183
maybeimaleo
maybeimaleo
Vedant Gonnade
  • Locked
  • Question
How to send a string (generated by camera) to computer
Replies
0
Views
118
Vedant Gonnade
Vedant Gonnade
BuilderSpec
  • Locked
  • Question
LDAP with AD/LDS
Replies
0
Views
49
BuilderSpec
BuilderSpec

Part and Inventory Search

Sponsor

Back
Top