Windows 2003 Active Directory and Crystal 11

[Roadki11]

Looking for some help figuring out why some AD schema attributes will not show data in crystal. I am using OLE DB (ADO) Active Directory Services Interface as my connector. I am creating a simple report, user name, when the account was created, last good logon, last logoff, last bad logon, and bad password count. I dont have any problem writing the ldap connection string and i get all the fields/attributes i want. My problem is some of the fields are empty of data in crystal even though i know they have data in AD. it seems to be a datatype issue im guessing. In the AD schema lets say the attribute is lastLogon, the data type is Large Integer/Interval(even though its a date and time stamp), if you look at it in crystal it states its a string. I am not sure if this is the problem or not but any AD attributes with the data type Large Integer/Interval comes out in crystal as string and displays no data. Now its also my understanding AD stores date and time stamps as some long integer and needs to be decoded to show the human readable date and time one would expect to see(i will deal with that in due time), but i cant get crystal to even show that long integer. Any thoughts on this would be a great help.

Thanks,



RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen

 

[mflynn5]

This reply is not going to help you (sorry) but I'm trying to connect in Crystal to ADAM. It sounds like I'm doing the same thing you are using OLE DB (ADO) Active Directory Services Interface. It doesn't give me an error but when I try to put in a command it tells me 'permission denied' no matter what I put in. I've tried just this:
'LDAP://DC=domain' and also this:
SELECT name FROM 'LDAP://OU=xxxxx,O=xxxx,cn=xxxx,DC=xxxx'
The xxxx equals the actual values. I'm not a Crystal person or LDAP for that matter but I was able to export the data using the ADAM Command Line tool CSVDE. I'd prefer to get this out of Crystal. Any ideas of something I could be missing?
Thanks! Mike

 

[Roadki11]

If i had to guess i would say you dont have enough permission with the user you are using to authenticate to AD with. I use myself, but i have domain admin, schema admin, and other rights. Try elevating your rights in AD.



RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen

 

[Roadki11]

here is a sample query i use that works, might help you tweek yours.

SELECT cn,badPwdCount,whenCreated,badPasswordTime,lockoutThreshold FROM 'LDAP://OU=myusercontainer,DC=mydomain,DC=com'

RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen