Authenticate user in OpenLDAP with username and password

[dorrit.Riemenschneider]

I need to validate a user with username and password against our
OpenLDAP active directory. This is my code:

Private bool ValidateUser (string username, string password)
{
DirectoryEntry userEntry = new DirectoryEntry(
ldapPath, username, password,
AuthenticationT ypes.Anonymous) ;
//Bind to the native AdsObject to force authentication.

Object obj = userEntry.Nativ eObject;
DirectorySearch er search = new
DirectorySearch er(userEntry);
search.Filter = "(cn=" + username + ")";
search.Properti esToLoad.Add("c n");
SearchResult result = search.FindOne( );
if (result != null)
return true;
else
return false;
}

The problem is, it returns also true if the username is correct, but
the password is false.
It looks like the user is located but not authenthicated.

I have already tried with several Authenthication Types:
I get an exeption "invalid dn-syntax" for Authenthication Types.None,
Authenthication Types.Delegatio n, Authenthication Types.FastBind,
Authenthication Types.ReadOnlyS erver, Authenthication Types.Sealing.

I get an exception "Die angeforderte Authentifizieru ngsmethode wird
durch den Server nicht unterstützt" (authenthicatio n method not
supported by server) for Authenthication Types.Secure or if I don't
specify an Authenthication Type.

Any help is appreciated!
Dorrit

[Willy Denoyette [MVP]]

<do************ ********@commun ardo.dewrote in message
news:11******** *************@v 33g2000cwv.goog legroups.com...
I need to validate a user with username and password against our
OpenLDAP active directory. This is my code:

Private bool ValidateUser (string username, string password)
{
DirectoryEntry userEntry = new DirectoryEntry(
ldapPath, username, password,
AuthenticationT ypes.Anonymous) ;
//Bind to the native AdsObject to force authentication.

Object obj = userEntry.Nativ eObject;
DirectorySearch er search = new
DirectorySearch er(userEntry);
search.Filter = "(cn=" + username + ")";
search.Properti esToLoad.Add("c n");
SearchResult result = search.FindOne( );
if (result != null)
return true;
else
return false;
}

The problem is, it returns also true if the username is correct, but
the password is false.
It looks like the user is located but not authenthicated.

I have already tried with several Authenthication Types:
I get an exeption "invalid dn-syntax" for Authenthication Types.None,
Authenthication Types.Delegatio n, Authenthication Types.FastBind,
Authenthication Types.ReadOnlyS erver, Authenthication Types.Sealing.

I get an exception "Die angeforderte Authentifizieru ngsmethode wird
durch den Server nicht unterstützt" (authenthicatio n method not
supported by server) for Authenthication Types.Secure or if I don't
specify an Authenthication Type.

Any help is appreciated!
Dorrit

[Willy Denoyette [MVP]]

<do************ ********@commun ardo.dewrote in message
news:11******** *************@v 33g2000cwv.goog legroups.com...
I need to validate a user with username and password against our
OpenLDAP active directory. This is my code:

Private bool ValidateUser (string username, string password)
{
DirectoryEntry userEntry = new DirectoryEntry(
ldapPath, username, password,
AuthenticationT ypes.Anonymous) ;
//Bind to the native AdsObject to force authentication.

Object obj = userEntry.Nativ eObject;
DirectorySearch er search = new
DirectorySearch er(userEntry);
search.Filter = "(cn=" + username + ")";
search.Properti esToLoad.Add("c n");
SearchResult result = search.FindOne( );
if (result != null)
return true;
else
return false;
}

The problem is, it returns also true if the username is correct, but
the password is false.
It looks like the user is located but not authenthicated.

I have already tried with several Authenthication Types:
I get an exeption "invalid dn-syntax" for Authenthication Types.None,
Authenthication Types.Delegatio n, Authenthication Types.FastBind,
Authenthication Types.ReadOnlyS erver, Authenthication Types.Sealing.

I get an exception "Die angeforderte Authentifizieru ngsmethode wird
durch den Server nicht unterstützt" (authenthicatio n method not
supported by server) for Authenthication Types.Secure or if I don't
specify an Authenthication Type.

Any help is appreciated!
Dorrit
AuthenticationT ypes.Anonymous means ... no authentication is performed, so your credentials
are not checked at all. You should specify None as type, this will force Basic
authentication, basically OpenLdap does only support "basic" and "SecureSocketsL ayer", other
types are not supported.
Another point is that you better use System.Director yServices.Proto cols (FCL v2) when
connecting to non Active Directory, OpenLDAP is not AD and the directory schema is not the
same as the AD schema so you better use lower level LDAP API's then the ADSI (wrapped by
SDS).
Following snip illustrates how you can bind using basic authentication.

using System.Director yServices.Proto cols;
....
using (LdapConnection ldap = new LdapConnection( "ldapserverName "))
{
ldap.AuthType = AuthType.Basic;
ldap.Bind(new NetworkCredenti al("username", "pwd")); // credentials for the
bind, username in upn format
// do whatever you need to do with the store
SearchRequest req = new SearchRequest(" cn=....", ....
....
}
Willy.

[dorrit.Riemenschneider]

OK, I'll try the approach with DirectoryServic es.Protocols then. Thanks
for the tip.

Dorrit

Willy Denoyette [MVP] schrieb:

<do************ ********@commun ardo.dewrote in message
news:11******** *************@v 33g2000cwv.goog legroups.com...
I need to validate a user with username and password against our
OpenLDAP active directory. This is my code:

Private bool ValidateUser (string username, string password)
{
DirectoryEntry userEntry = new DirectoryEntry(
ldapPath, username, password,
AuthenticationT ypes.Anonymous) ;
//Bind to the native AdsObject to force authentication.

Object obj = userEntry.Nativ eObject;
DirectorySearch er search = new
DirectorySearch er(userEntry);
search.Filter = "(cn=" + username + ")";
search.Properti esToLoad.Add("c n");
SearchResult result = search.FindOne( );
if (result != null)
return true;
else
return false;
}

The problem is, it returns also true if the username is correct, but
the password is false.
It looks like the user is located but not authenthicated.

I have already tried with several Authenthication Types:
I get an exeption "invalid dn-syntax" for Authenthication Types.None,
Authenthication Types.Delegatio n, Authenthication Types.FastBind,
Authenthication Types.ReadOnlyS erver, Authenthication Types.Sealing.

I get an exception "Die angeforderte Authentifizieru ngsmethode wird
durch den Server nicht unterstützt" (authenthicatio n method not
supported by server) for Authenthication Types.Secure or if I don't
specify an Authenthication Type.

Any help is appreciated!
Dorrit
AuthenticationT ypes.Anonymous means ... no authentication is performed, so your credentials
are not checked at all. You should specify None as type, this will force Basic
authentication, basically OpenLdap does only support "basic" and "SecureSocketsL ayer", other
types are not supported.
Another point is that you better use System.Director yServices.Proto cols (FCL v2) when
connecting to non Active Directory, OpenLDAP is not AD and the directory schema is not the
same as the AD schema so you better use lower level LDAP API's then the ADSI (wrapped by
SDS).
Following snip illustrates how you can bind using basic authentication.

using System.Director yServices.Proto cols;
...
using (LdapConnection ldap = new LdapConnection( "ldapserverName "))
{
ldap.AuthType = AuthType.Basic;
ldap.Bind(new NetworkCredenti al("username", "pwd")); // credentials for the
bind, username in upn format
// do whatever you need to do with the store
SearchRequest req = new SearchRequest(" cn=....", ....
...
}
Willy.