Ldap search within active directory for authentication via ASP

[wak0]

Hi, I hope you guys can help me.

I need to build a form that request username and password on ASP not ASP.net (sorry to clarify but i got some responses in other forums in .net)

This form will send an LDAP query into the active directory located on a different server and it will check for existing users.

If the users exist they will be redirected to a new page. if not they will be prompt to try again for username and password.


What is happening I am gett authentication failed all the time. I know i am a user but I dont know why I am not being redirected to the page i need.

could it be that the server is using another way of saving the users other than LDAP or Active directory?

To be more specific. People are being added to an Xchange server for email purposes. This creates a username (email) and a password. Giving them access to a webmail.

how can i compare this list of users using this code.

the form i am working with is this

<%
dim submit
dim UserName
dim Password
 
UserName = ""
Password = ""
Domain = "domain.com"
 
submit = request.form("submit")
 
if submit = "Authenticate" then
UserName = request.form("UserName")
Password = request.form("Password")
Domain = request.form("Domain")
result = AuthenticateUser(UserName, Password, Domain)
if result then
Response.Write("<script>window.open('../forms/default.asp','');</script>")
else
response.write "<h3>Authentication Failed!</h3>"
end if
end if
 
response.write "<hr><form method=post>"
response.write "<table>"
response.write "<tr>"
response.write "<td><b>Username:&nbsp;</b></td><td><input type='text'"
name="'UserName' value='' & UserName & '' size='30'></td>"
response.write "</tr>"
response.write "<tr>"
response.write "<td><b>Password:&nbsp;</b></td><td><input type='password' name='Password' value='' & Password & '' size='30'></td>"
response.write "</tr>"
response.write "<tr>"
response.write "<td><b>AD Domain:&nbsp;</b></td><td><input type='text' name='Domain' value='' & Domain & '' size='30'></td>"
response.write "</tr>"
response.write "<tr>"
response.write "<td>&nbsp;</td><td><input name='submit' type='submit' value='Authenticate'></td>"
response.write "</tr>"
response.write "</table>"
response.write "</form>"
response.end
 
function AuthenticateUser(UserName, Password, Domain)
dim strUser
' assume failure
AuthenticateUser = false
 
strUser = UserName
strPassword = Password
 
strQuery = "SELECT cn FROM 'LDAP://" & Domain & "' WHERE objectClass='*' "
set oConn = server.CreateObject("ADODB.Connection")
oConn.Provider = "ADsDSOOBJECT"
oConn.Properties("User ID") = strUser
oConn.Properties("Password") = strPassword
oConn.Properties("Encrypt Password") = true
oConn.open "DS Query", strUser, strPassword
 
set cmd = server.CreateObject("ADODB.Command")
set cmd.ActiveConnection = oConn
cmd.CommandText = strQuery
on error resume next
set oRS = cmd.Execute
if oRS.bof or oRS.eof then
AuthenticateUser = false
else
AuthenticateUser = true
 
end if
set oRS = nothing
set oConn = nothing
 
end function
 
%>

[CroCrew]

Hello wak0,

Question: Is the web server in the domain? Or is it a standalone web server?

CroCrew~

[wak0]

stand alone. Thanks for replying

[CroCrew]

Hello wak0,

Since you are doing a server-less bind to Active Directory, ADSI tries to pick up the domain to use based on the current security context of the executing thread. In ASP, impersonation is always used.

Try to add “/rootDSE” after your domain name:

LDAP://domain.com/rootDSE

In general, if the web server was within the domain, I'd suggest using Windows authentication instead. Windows Authentication allows you to avoid this mess and will give you better scalability.

Consider going down this path if Windows Authentication is absolutely not a possibility:

Set objDSObj = GetObject("LDAP:")
Set objAuth = objDSObj.OpenDSObject("LDAP://domain.com/rootDSE",
strDomainUser, strPassword, 1)
 

Hope that it helps,
CroCrew~

[wak0]

that is what i found out. thanks for the tip. will implement and check back

[CroCrew]

Let us know if it works out for ya. It could help the next person.

Good luck,
CroCrew~