Querying AD using vb script from ASP page returns "An operations error occurred"

[AnuGarg]

Hi,

I am trying to query AD for sAMAccountName attribute for given email.
My code is as follows:

 
Dim ldapSearchBaseDn,ldapSearchHost,ldapUser,ldapPwd    
 
ldapSearchBaseDn = "dc=test,dc=com"  ''"base dn"    
ldapSearchHost = "IP of domain system"    
ldapUser    = "domain\username"
ldapPwd     = "password"
email  = "[e-mail]"
Set oConn = Server.CreateObject("ADODB.Connection")
 
oConn.Provider = "ADSDSOObject"
oConn.properties("User ID") = ldapUser
oConn.properties("Password") = ldapPwd
oConn.Properties("Encrypt Password") = true    
oConn.Open "Ads Provider"  
 
Set rs = oConn.Execute("<LDAP://" & ldapSearchHost & "/" & ldapSearchBaseDn &">;" &_
 "(&(objectClass=user)(mail=" & email & "));" &_
  "sAMAccountName;subtree")    
 
 

When I am running the above code as vbs file, my code is running without any issue and returning sAMAccountName for given email.
But when I am running same query from ASP page, then I am getting following Error:
Error# -2147217865
Error Desc= An operations error occurred
Error Source - Active Directory

Please help me in solving the above issue. Its very urgent.

Thanks,
Anu

[jhardman]

The problem is probably that the iusr account doesn't have access to AD. When you run it from a .vbs file you are probably executing it yourself, so it runs under your username. Go into IIS and (if you dare) set the asp process to run under your user account instead of iusr. I bet that will fix the problem.

Jared

[AnuGarg]

Thanks for reply.
I am member of "domain Admin" group in AD.
I have to run this query without changing IIS settings.
I have tried the same in 2 different systems
1.Error "Table does not existss" if I run same query from asp page published in windows2003
2. "Operation error occured" if I run from windows2008 system

Does it make any difference? As I am getting different error when running in windows2003 system.
I had run same query successfully a long time back from windows2003 system.

Thanks,
Anu

[jhardman]

The bottom line is there is nothing wrong with the script, the problem is the account the script uses when it executes. It does not run under your user credentials, it runs as a service account called "iusr_(computername)". That account doesn't usually have very many permissions, and it isn't a member of the AD.

I don't know of any way to do this without changing IIS settings. I guess you could try to add the iusr account to the domain, but I've never tried that, not sure if it can work. You could also try increasing iusr's permissions.

Jared

[AnuGarg]

Hi jhardman,

My website is published in IIS7.0 in windows2008 system.
The main IIS settings are:
Authentication - Anonymous
Authorization rules - allow all
.Net trust levels - full
The Application Pool settings are as below:
Managed Pipeline Mode - Integrated
Identity - LocalSystem
Load User Profile - false

Please advise ,What do I need to change in above settings to run my script?

Thanks,
Anu

[jhardman]

go into IIS (type inetmgr into the run prompt)
select your server
double click on authentication
right click on "anonymous authentication"
select "edit" and you will see the above image
click on "set..." to change user

Let me know if this works.

Jared

[AnuGarg]

Hi Jared,

I need not to make any changes in IIS and I get solution with following script:

ldapSearchBaseDn =  "dc=abc,dc=com"     
ldapSearchHost =  "AD IP"    
ldapUser         = "AD User"
ldapPwd         = "password"   
email              = "[e-mail]"
 
strQuery = "<LDAP://"& ldapSearchHost & "/" & ldapSearchBaseDn &">;" &_
"(&(objectCategory=user)(mail=" & email & "));" &_
"samAccountName;" &_
"subtree"
 
Const ADS_CHASE_REFERRALS_SUBORDINATE = &H20
 
'Start the ADO connection
Set oConnection1 = CreateObject("ADODB.Connection")
Set objCommand = CreateObject("ADODB.Command")
oConnection1.Provider = "ADsDSOObject"
oConnection1.Properties("User ID") = user
oConnection1.Properties("Password") = pwd
oConnection1.Properties("Encrypt Password") = True
oConnection1.Open "ADsDSOObject"
objCommand.ActiveConnection = oConnection1objCommand.CommandText = strQuery
objCommand.Properties("Cache Results") = False
objCommand.Properties("Chase Referrals") = ADS_CHASE_REFERRALS_SUBORDINATE
 
Set rs = objCommand.Execute
Set objCommand = nothing
 
If Err.Number = 0 then    
if not rs.eof then
    user = trim(rs("sAMAccountName").value)
end if
end if
 

But now I have one more issue. I have created one file test.txt in c:\windows\temp folder. I am trying to read that file. But when i check for its existence, its returning me false i.e. file does not exists.
My code is as follows:

Dim fileName,fso
ForReading = 1
fileName="C:\WINDOWS\Temp\MacList.txt"
 
set fso=Server.createobject("scripting.FileSystemObject")
 
If fso.FileExists(fileName) then
  //code to handle it
else
 //file not exists
end if
 
 

and above code is returning that file does not exists.
Please help.

Thanks
Anu