all groups > dotnet security > may 2007 >
You're in the

dotnet security

group:

LDAP Bind to ADAM user - bad-pwd-count not being set.



LDAP Bind to ADAM user - bad-pwd-count not being set. Glenn
5/31/2007 2:35:01 PM
dotnet security: I'm using System.DirectoryServices.Protocols. I'm binding to an ADAM user.
The basic functionality is working fine, correct passwords and user DNs
successfully bind and incorrect passwords and user DNs fail.

When the password is incorrect, but the user DN is correct I would expect
that the badpwdcount attribute would be incremented. I'm not seeing that
happen. Does anyone know why? I'm currently testing with ADAM installed on a
Windows XP system. Has anyone seen this functionality work properly on
Windows 2003?

I


--
Re: LDAP Bind to ADAM user - bad-pwd-count not being set. Joe Kaplan
5/31/2007 6:25:41 PM
I know that password policy enforcement like lockout doesn't work on XP with
ADAM, so this may be a symptom of that. Try it on 2003 server and see if
that fixes it.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
[quoted text, click to view]

Re: LDAP Bind to ADAM user - bad-pwd-count not being set. Glenn
6/1/2007 6:26:05 AM
Yes, it works on Windows Server 2003.

I think that instead of saying that ADAM is supported on XP, Microsoft
should say something like "While ADAM will 'run' on XP for development
purposes, there are enough issues involved with ADAM's operatoin on XP that
you should avoid it if possible."

Thanks though.

--
Glenn Sills


[quoted text, click to view]
Re: LDAP Bind to ADAM user - bad-pwd-count not being set. Joe Kaplan
6/1/2007 9:24:57 AM
I think they do say that some features such as password policy are not
supported. There are definitely a ton of useful things you can do with ADAM
on XP. This just doesn't happen to be one of them. :)

It is often difficult to find the right documentation that tells you exactly
what the limitations are though. Finding documentation on ADAM is harder
than it should be in general.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
[quoted text, click to view]

AddThis Social Bookmark Button