Reputation
456
Top tag
Next privilege 500 Rep.
Access review queues
Badges
4 18
Impact
~24k people reached

  • 0 posts edited
  • 1 helpful flag
  • 69 votes cast
Sep
29
comment ADSIEdit freezes gettings properties of a group with hundred of thousands members
Indeed. LDP can also handle large objects. On an related note : installating LDS with the tools does not require a reboot, but installing the AD and AD-LDS tools requires a reboot
Sep
29
comment ADSIEdit freezes gettings properties of a group with hundred of thousands members
We could bring it down to about 30k, but that's still too much for ADSI. We don't have much control over the third party software requiring such large groups.
Sep
29
asked ADSIEdit freezes gettings properties of a group with hundred of thousands members
Sep
24
comment Does AD LDS support account lockout?
And if you set a policy to be applied locally on a domain machine, it will take over. No need to lower the domain wide policy to accomodate AD-LDS users (which might have other needs).
Sep
19
accepted How many users can be in a AD LDS group?
Sep
19
answered How many users can be in a AD LDS group?
Sep
10
awarded  Student
Sep
10
asked How many users can be in a AD LDS group?
Sep
5
answered Active Directory LDS Structure Best Practices
Aug
30
comment How to safely use corporate Active Directory (LDAP) authentication for an internet facing web site?
If your LDS server is on the same domain as your Active Directory, then make the users proxy users (userProxy or userProxyFull object class). That way, the LDS will be free of passwords. It will not free you from creating the users and assign them to groups, though.
Aug
30
comment How to safely use corporate Active Directory (LDAP) authentication for an internet facing web site?
After you have that discussion with them, update the post and tell us what they're affraid of.
Aug
30
comment How to safely use corporate Active Directory (LDAP) authentication for an internet facing web site?
AD LDS does not sync anything. You must use ADAMSYNC, scripted to run periodicaly.
Jul
4
comment Setting up SSL with 389 Directory Server for LDAP authentication
You can check your ssl configuration with this : openssl s_client -connect fqdn.of.the.ldap.server.or.ip:636. The server should answer back with the certificates. If not, there is a problem with your server's configuration. Update your question with the results.
Jul
2
awarded  Yearling
Jun
29
answered Tomcat session managment - independent session in one host
Jun
28
comment Tomcat session managment - independent session in one host
Are dir1 and dir2 different applications or different path in a single application ?
Jun
23
awarded  Teacher
Jun
23
answered ISAPI filter with LDAP over SSL only works as administrator
Apr
16
answered Console session logging on problems
Apr
6
awarded  Editor