How do I create a bind account?

[IndyCoder]

Im new to AD and I am trying to tie in a help desk solution to authenticate against AD. What I want to know is do I have to do anything special to create an account that binds to AD? Can any account do this or does it have to have administrtive privileges?

Is there a group it must be a member of to do this?
Any help would be appreciated.
Thanks again

 

[chipk]

What do you mean a "bind" account? When you say bind, I don't get the impression that you're talking about Berkeley Internet Name Domain (or daemon).

If you have a help desk program that needs to read the Active Directory, that system account will need at least user priveleges in AD. What software are you using and what does it do?

 

[IndyCoder]

It is HP service center and it uses AD as the authentication source through open LDAP. I am able to connect to AD but the it give me a 49 error which states invalid credentials or bad password.

I am wondering if there is a disconnect between open LDAP and AD. We dont use anpnymous auth for AD and I am wondering if open LDAP support this or not?

I can browse AD with any user account using a ldap call which makes me tihnk there may be an issue on the HP service center side.

 

[chipk]

When you make that ldap call that's working, where are you making the call from? Who are you logged in as, or are you providing credentials in the ldap call itself? I'm still not clear on how HP is authenticating to AD. Are you saying it's anonymous? Don't think that's going to work. I believe you have to explicitly allow anonymous queuries in AD using ADSI edit.

 

[IndyCoder]

It turns out that the user account we use to make the call to AD was not created successfully.

I have never heard of this but I deleted and re-created the account and everything was good again.


Thanks
IC