Active Directory authentication / authorisation

Max Vit

I have been toying with the idea of having an Active Directory
authentication / authorisation functionality in MS Access; but there
is not much useful info around.

I have built these functionalities for some applications (JAVA, PHP).
The parameters used there are the LDAP parameters for AD:

*searchFilter: (objectClass=us er)
*searchBase: OU=register,OU= applications,DC =inside,DC=myco mpany,DC=com
*adminPassword: Password
*adminName: CN=LDAP
Lookup,OU=Servi ces,OU=applicat ions,DC=inside, DC=mycompany,DC =com
*ldapURL: ldap://ldap.nicta.net

But I have not had much experience with LDAP queries using VBA :-(

Is there any sample code showing the correct synthax and appropriate
functions to use these parameters in a VBA for Access environment?

My idea is to have users presented with a login form; if they
authenticate successfully against AD then I can manage their
authorisation in locally in MS Access.

An even better scenario would be to also check if they belong to a
specific AD group - this way I could also manage authorisation using
AD.

I am using Access2k3 on Win XP S2; the AD service supports LDAP v4.

Any help would be greatly appreciated.

Jul 6 '07 #1

Subscribe Reply

9278

Tony Toews [MVP]

Max Vit <mv**@safe-mail.netwrote:

>I have been toying with the idea of having an Active Directory
authenticati on / authorisation functionality in MS Access; but there
is not much useful info around.

Here's a dump of everything I found a year or go as is in OneNote. You'll have to
figure out which of these links are appropriate to your scenario. I built a tool
that could create folders and subfrlders by job with different permissions for the
subfolders which varied by group.

nternet resources
Programmaticall y Set NTFS File System Folder Permissions

Enumerating Local Groups and Descriptions with NetLocalGroupEn um
Pasted from <http://vbnet.mvps.org/code/network/netlocalgroupen umdesc.htm>

Enumerating Members of a Group with NetLocalGroupGe tMembers
Pasted from <http://vbnet.mvps.org/code/network/netgocalgroupge tmembers.htm>

Xcacls.exe
Pasted from <http://support.microso ft.com/default.aspx?sc id=KB;EN-US;825751>

How To Use High-Level Access Control APIs from Visual Basic
Pasted from <http://support.microso ft.com/default.aspx?sc id=kb;EN-US;295004>
http://msdn.microsoft.com/library/de.../iadsgroup.asp

Following might do everything I want.
http://groups.google.ca/groups?hl=en...it%26spell%3D1

ldap

http://msdn.microsoft.com/library/de...ivediradsi.asp

Active Directory Service Interfaces Quick-start Tutorials
Pasted from
<http://msdn.microsoft. com/library/en-us/adsi/adsi/adsi_quick-start_tutorials .asp?frame=true >
IADsAccessContr olEntry
Pasted from
<http://msdn.microsoft. com/library/en-us/adsi/adsi/iadsaccesscontr olentry.asp?fra me=true>

An ADSI Primer, Part 11: More on Scripting Permissions and Auditing (Windows
Scripting though)
Pasted from
<http://www.windowsitpr o.com/WindowsScriptin g/Article/ArticleID/7456/7456.html>
HOWTO: Use ADsSecurity.dll to Remotely Add Local Account ACEs to an NTFS File
Pasted from <http://support.microso ft.com/default.aspx?sc id=kb;en-us;Q285998>

How To Use ADSI to Set Automatic Inheritance of File/Folder Permissions
Pasted from <http://support.microso ft.com/kb/266461/EN-US/>

http://groups.google.ca/groups?q=gro...il.com&rnum=10

Various constants are at the following:
http://www.serverwatch.com/tutorials...le.php/1476721

Security and Access Rights
http://msdn.microsoft.com/library/de...ess_rights.asp
How To Use ADSI to Set Automatic Inheritance of File/Folder Permissions
Pasted from <http://support.microso ft.com/default.aspx?sc id=kb;en-us;266461>
VBScript recursive changing of subfolders
IADsAccessContr olEntry Property Methods
http://msdn.microsoft.com/library/de...ty_methods.asp
HOWTO: Use ADsSecurity.dll to Remotely Add Local Account ACEs to an NTFS File
Pasted from <http://support.microso ft.com/default.aspx?sc id=kb;en-us;Q285998>

How To Use ADsSecurity.dll to Add an Access Control Entry to an NTFS Folder
Pasted from <http://support.microso ft.com/default.aspx?sc id=kb;en-us;Q279682>

--
Tony Toews, Microsoft Access MVP
Please respond only in the newsgroups so that others can
read the entire thread of messages.
Microsoft Access Links, Hints, Tips & Accounting Systems at
http://www.granite.ab.ca/accsmstr.htm
Tony's Microsoft Access Blog - http://msmvps.com/blogs/access/

Jul 9 '07 #2

Max Vit

Hi Tony - Thanks a lot, very useful information!

Once I find some suitable solution I'll post the code here for the
benefit of others.

Jul 9 '07 #3

Similar topics

2133

Cannot See a Newly Installed SQL Server 2000 (No Active Directory)

by: Jay Chan | last post by:

We have just installed a SQL Server 2000 (SP 3A) onto a computer that has Windows-2003 Server on it. Now, we cannot get access to that database server from other computers. Seem like this may be an issue with Active Directory. Our network consists of Windows-2000 Servers (SP 4) and Windows-2000 workstations and Windows-XP workstations. We also have SQL Server 2000 (SP2) in three Windows-2000 servers. All work fine. Recently, we get a...

Microsoft SQL Server

1712

Forms Authentication and Active Directory

by: - Steve - | last post by:

I have forms based authentication working, using my Active Directory for authentication. I have a web page that creates a user in active directory. When I was using IIS authentication it worked fine, now it doesn't. I'm assuming it's running in the context of the IIS anonymous user. How can I get it to run as the user that logged in with the forms based authentication? --

ASP.NET

4755

Problem querying LDAP and/or Active Directory

by: Andrew | last post by:

Hey all, Working on revamping our Intranet here and making use of the LDPA, Active Directory, Directory Services, etc. that .Net provides. I am still fairly new on this subject, so the problem I have run into I am not sure how to fix, and really not sure what is causing it. Here's what is going on (test server - Windows 2003 Server): I have a page in a folder (under anonymous authentication in IIS6) that has a link on it that...

ASP.NET

1370

Accessing Active Directory Information

by: thomson | last post by:

Hi, Is it possible to access the user information from a Web Application, Iam not able to use System.DirectoryServices from my code behind.---using System.DirectoryServices What am i missing? Thanks in Advance thomson

ASP.NET

3180

"Sudden" Active Directory error on ASP.NET

by: Patrick | last post by:

I have an ASP.NET page that searches for someone in the corporate Active Directory. It had been working fine until recently when I changed from Basic Authentication on IIS6 back to Integrated Windows authentication. The error occurs on the FindAll method. The exceptions are as follows. anyway of getting the code working with Integrated Windows authentication (too annoying for user to enter user-name/password). Note I do need to use...

ASP.NET

2468

urgent help on Active Directory Authentication from dotnet

by: varkey.mathew | last post by:

Dear all, Bear with me, a poor newbie(atleast in AD).. I have to authenticate a user ID and password for a user as a valid Active Directory user or not. I have created the IsAuthenticated function exactly as outlined in the below link. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetHT02.asp

ASP.NET

2351

Active Directory Vs Sql Server which way to go?

by: Patrick.O.Ige | last post by:

If i want to generate a menu structure depending on who is logged in in an intranet system(using windows authentication) is it better to use the GROUPS in Active Directory or to move the Active Directory groups into a Sql Server database and base the authrorization and authentication on the SQL Server roles/groups? Whats the best way to make use of the GROUPS in active directory to authorize users apart from using web.config where you...

ASP.NET

4661

ASP.NET 1.1 Application Pool Identity and user authentication problem with AD (Active Directory)

by: pjdouillard | last post by:

Hello all, Here is the context of my problem: We have an ASP.NET 1.1 application that has its own application pool setup and that runs under the identity of a NT Domain service account (this is for security reason when accessing databases). We use the Integrated Windows authentication to authenticate users, and we have setup the Web.config file to authenticate those users against 3 NT Domain Global Groups. Everything is working fine...

ASP.NET

4065

Windows Authentication through Active Directory

by: Hriday | last post by:

Hi there, Please help me..It is urgent This is Hriday, working on windows authentication with Active Directory... My requirment is when a user sends a request to my web Applicatoin I want to Pop up windows Authentication box so that user will give his userId, Password & domain name for authenticaion. After that I want to take these three info of user and make a search in Active Directory.

Visual Basic .NET

9636

What is ONU?

by: marktang | last post by:

ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...

General

9474

Changing the language in Windows 10

by: Hystou | last post by:

Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...

Windows Server

10306

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...

C / C++

10138

Maximizing Business Potential: The Nexus of Website Design and Digital Marketing

by: jinu1996 | last post by:

In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...

Online Marketing

9930

Discussion: How does Zigbee compare with other wireless protocols in smart home applications?

by: tracyyun | last post by:

Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...

General

8961

AI Job Threat for Devs

by: agi2029 | last post by:

Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...

Career Advice

7485

Access Europe - Using VBA to create a class based on a table - Wed 1 May

by: isladogs | last post by:

The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...

Microsoft Access / VBA

3632

How to add payments to a PHP MySQL app.

by: muto222 | last post by:

How can i add a mobile payment intergratation into php mysql website.

PHP

2869

Comprehensive Guide to Website Development in Toronto: Expert Insights from BSMN Consultancy

by: bsmnconsultancy | last post by:

In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

General