401 reputation
214
bio website paralint.com
location Montreal, Canada
age
visits member for 3 years, 7 months
seen yesterday

I like smart people who get things done. I do my best everyday to be one of them.

I code mostly in C++, Python, Java and... whatever comes my way. I also like to understand a problem down to its roots, a process also known as debugging.

LinkedIn and Careers profiles.


Nov
29
answered Email address as rdn in Active Directory Application Mode - ADAM
Nov
29
revised Replication of lockoutTime attribute is not urgent on AD-LDS
Found the trouble with the detailled diagnostics logs, updated accordingly
Nov
28
revised Replication of lockoutTime attribute is not urgent on AD-LDS
Broken links from copy paste
Nov
28
asked Replication of lockoutTime attribute is not urgent on AD-LDS
Nov
15
asked Create a AD-LDS partition under a child of the primary partition
Oct
10
accepted ADSIEdit freezes gettings properties of a group with hundred of thousands members
Sep
29
comment ADSIEdit freezes gettings properties of a group with hundred of thousands members
Indeed. LDP can also handle large objects. On an related note : installating LDS with the tools does not require a reboot, but installing the AD and AD-LDS tools requires a reboot
Sep
29
comment ADSIEdit freezes gettings properties of a group with hundred of thousands members
We could bring it down to about 30k, but that's still too much for ADSI. We don't have much control over the third party software requiring such large groups.
Sep
29
asked ADSIEdit freezes gettings properties of a group with hundred of thousands members
Sep
24
comment Does AD LDS support account lockout?
And if you set a policy to be applied locally on a domain machine, it will take over. No need to lower the domain wide policy to accomodate AD-LDS users (which might have other needs).
Sep
19
accepted How many users can be in a AD LDS group?
Sep
19
answered How many users can be in a AD LDS group?
Sep
10
awarded  Student
Sep
10
asked How many users can be in a AD LDS group?
Sep
5
answered Active Directory LDS Structure Best Practices
Aug
30
comment How to safely use corporate Active Directory (LDAP) authentication for an internet facing web site?
If your LDS server is on the same domain as your Active Directory, then make the users proxy users (userProxy or userProxyFull object class). That way, the LDS will be free of passwords. It will not free you from creating the users and assign them to groups, though.
Aug
30
comment How to safely use corporate Active Directory (LDAP) authentication for an internet facing web site?
After you have that discussion with them, update the post and tell us what they're affraid of.
Aug
30
comment How to safely use corporate Active Directory (LDAP) authentication for an internet facing web site?
AD LDS does not sync anything. You must use ADAMSYNC, scripted to run periodicaly.
Jul
4
comment Setting up SSL with 389 Directory Server for LDAP authentication
You can check your ssl configuration with this : openssl s_client -connect fqdn.of.the.ldap.server.or.ip:636. The server should answer back with the certificates. If not, there is a problem with your server's configuration. Update your question with the results.
Jul
2
awarded  Yearling