Integrat AD with LDS?

hi, facing problem ad lds.  scenario have login information of users stored in ad , other attributes of users stored in lds, want merge both these information , display it. can 1 please me out on or suggest articles or code snippet of help.

thanks

hi sourabh,

referring to the requirements listed in previous post, there's nothing particularly strange or difficult requirements.

going original post, sticking point might idea of "merging" two. trying to think of ad , ad lds in same way as two tables in database isn't practical people (there caveat deliberately chosen example, i'll cover later).

the question have trying achieve? answer dictate options available you.

if you're using kind of com process found within old adodb classes, you'll need use 2 adodb.connection objects. same philosophy applies if you're using .net system.data derived classes. 1 connection point ad while other points ad lds.

in terms of how "synchronise" both ad , ad lds, depends on you're trying achieve. fim , adamsync 2 methods available microsoft, however, there's nothing stopping programatically populating ad lds either. regardless of how it, there's no reason can't store have in ad in ad lds, since you're provisioning ad sounds of things.

in case, since you're not using ad lds authentication, recommendation attempt perform bind against active directory, , if fails user, deny access , exit/move on/do whatever need do. if succeeds, move onto authorisation checking group memberships account has in ad lds, (and would) in context of application or service account. assuming pass authorisation check, can on running main part of application - whatever may be.

the caveat alluded earlier comes using called "linked servers" within sql server. creating 2 linked servers - 1 ad , other ad lds, can create views indeed link data obtained both directory services. however, there technical limitations approach, such not being able return multivalued attributes @ all.

if needs basic, you might choose to look this. if they're complex, it may not be suitable. handle authentication approach if utilise kerberos contrained delegation, if you're not familiar underlying concepts going difficult navigate. nevertheless, option. can read more kcd here if you're interested.

right though, it's hard know suggest because there's not enough information in original posts tell you're trying achieve. if can provide more concise information, can better you.

all said, it's important keep in mind isn't programming forum, whole question might end outgrowing advice forum can give (though may able direct more appropriate forum in process).

cheers,
lain

Windows Server  >  Directory Services