Is it OK to use an email address as the CN attribute in ADAM (I don't mean the email/mail attribute)? I have a requirement that calls for ADAM for authentication and the user's email address as the CN (e.g. CNfirstname.lastname@example.org and CNemail@example.com). It seems odd to have an "@" character in the CN property but I tested it and authentication works fine. I can't find anything online to suggest an email address should not be used as the CN except that and ADAM CN cannot have more than 64 characters which could potentially be an issue in rare cases. Also, Softerra LDAP browser won't allow me to add a UPN with multiple "@" characters although this project doesn't include UPN in the scope. Sanity check before we pull the trigger. Thanks, Jim
I would advise against that. The attribute used to bind is the RDN. If you lookup your object class in the LDS schema, you will find that cn is the RDN (the display name of the attribute is
IIRC the only way to change the RDN is to have it set to what you want when the schema is imported.
That leaves you two choices :
I really have no idea if option #1 will work.
Option #2 is how I always do it. Your application will :
+The limits imposed by Softerra are not in AD-LDS. You can create a user named
Gives the following result :