Skip to content

Ldap

Jump to bottom
Nahid Farrokhi edited this page Jan 31, 2019 · 1 revision

How to add/edit a user to ldap on a server with admin privileges

In order to add/edit user to ldap, you need admin privileges on the server.

  • RDP to the server
  • Go to Control Panel -> Administrative Tools
  • Open ADSI EDIT
  • Select Action -> Connect to from top left menu
  • Set values on connect dialog like this and then press OK
    • Distinguished name: DC={dc},DC=am,DC=mds,DC={dc},DC=com
    • Server name: {IP}:{Port}
screen shot 2016-07-15 at 9 29 31 pm
  • If you have admin privilege you will see list of users under the DC
screen shot 2016-07-15 at 9 32 32 pm
  • Reset Password Select user -> right click -> select reset password
screen shot 2016-07-15 at 9 37 16 pm
  • Edit User Properties Select user -> right click -> select properties -> select a property and edit
screen shot 2016-07-15 at 9 35 13 pm
  • **Add New User`
    • Select Action -> New -> Object from top left menu
    • Select User -> press Next
    • Insert user's cn value -> press Next
    • Click on More Attributes
    • Select property and insert the value in the text box
    • Check msDS-UserAccountDisabled property to make sure it is set to False. Default for that is True (disabled) and user login will not be successful.
    • employeeType for contract users will be CNT whereas that of retirees will be RET
screen shot 2016-07-15 at 9 41 43 pm
  • Click on Finish
  • Refresh the list
  • New added user should be on the list

How to just verify ldap connection to the server without admin privileges

  • RDP to the sever

  • Download LdapAdmin.exe

  • Create a new none secure connection to LDAP server

    • Set Name: {DC-name}
    • Set Host: {IP}
    • Set Port: {post}
    • Select GSS-API
    • Check mark anonymous connection
    • Leave username and password empty
screen shot 2016-07-15 at 7 56 43 pm
  • Click on Test Connection, you should get success message
  • Click on fetch DNS there should appear 3 in the list which one of them should be DC={DC},DC=am,DC=mds,DC={DC},DC=com
screen shot 2016-07-15 at 7 59 27 pm

  • Create a SSL connection to LDAP server

    • Set Name: {Dc-Name}-ssl
    • Set Host: IP
    • Set Port: 639
    • Select GSS-API
    • Check mark anonymous connection
    • Check mark SSL
    • Leave username and password empty
screen shot 2016-07-15 at 8 03 14 pm
  • Click on Test Connection, you should get success message
  • Click on fetch DNS there should appear 3 in the list which one of them should be DC={DC},DC=am,DC=mds,DC={DC},DC=com
screen shot 2016-07-15 at 7 59 27 pm
Clone this wiki locally