16,615 questions
Best practices
0
votes
0
replies
13
views
Kerberos Authentication Flow on Openshift
I’m trying to implement Kerberos SSO (SPNEGO / Integrated Windows Authentication) for a web application in an Active Directory environment.
The application is deployed on OpenShift Kubernetes and ...
3
votes
1
answer
93
views
PowerShell Get-ADUser Published Certificates Import Error
I'm looking for some help with pulling certificate information from Active Directory. When I'm troubleshooting accounts, it can take a while to manually check each individual settings. One of the ...
0
votes
0
answers
48
views
Tomcat server.xml LDAP search filter user
I want to filter users and import them who has the roles LR_aa_Users_r or LR_aa_Admin_STAGE_f but it does not work if I put this query in server.xml file in tomcat server(tomcat 9).
But the ldap query ...
Best practices
0
votes
2
replies
96
views
How to map network drives on Windows 11 PRO most efficiently for home use
My wife and I both have Windows 11 PRO machines. I’d like to map a share on her machine to T: and a share on mine to R: so that we both have access to both network drives.
I’m currently doing this ...
3
votes
1
answer
107
views
Adding the unicodePwd attribute to a new Active-Directory account with Mulesoft LDAP connector
I want to create an account in Active Directory(AD) with the LDAP Mulesoft connector. I can do his without a problem but it works ONLY when I don't submit the user password(unicodePwd). So the problem ...
1
vote
1
answer
256
views
How to correctly establish connection with active directory via LDAP in Golang
I have been trying to write a daemon in go to run on linux that would periodically do certain actions, and once some conditions are met, it would connect to AD, and write a value to a given record.
...
0
votes
1
answer
136
views
LDAP Query for Group Membership Does Not Return Global Security Groups
I'm trying to setup Grafana for AD integration. Grafana works by querying for all groups a user is a member of to find a matching group that is mapped to a role in Grafana. Below is my heirarchy
...
Advice
0
votes
0
replies
73
views
Store AD credentials in AWS and rotate automatically
I deployed a Windows AD server on an EC2 instance in AWS. I have created a user called "tesla" in the AD. How can I store this user's credentials in AWS and rotate the password automatically?...
1
vote
1
answer
932
views
Scripted installation of the PowerShell Active Directory (ActiveDirectory) module on Windows 11
In my PowerShell scripts I'm using the ActiveDirectory module, which contains the various *-AD* cmdlets such as Get-ADUser.
How can I automate (script) the installation of the PowerShell ...
0
votes
0
answers
61
views
Grabbing User Lockout location in C#
I would like if anyone knows a way to retrieve the lockout location of a user. Is the best way to do that is to read the eventlog from the domain and extract the location from the security event or is ...
2
votes
1
answer
225
views
"There is no such object on the server" when connecting to "CN=Deleted Objects"
I am using the DirectoryEntry class to connect to an LDAP entry point, so I can issue LDAP queries. I can specify any distinguished name I want, however whenever the Deleted Objects container is ...
0
votes
1
answer
88
views
How to include the department property when listing AD group members in PowerShell?
I need to use PowerShell to get the members of an Active Directory group.
I'm currently using this command:
Get-ADGroupMember -identity "some groupname" -Recursive | Get-ADUser -Property ...
0
votes
1
answer
148
views
How to restore the default permissions of a user object in Active Directory?
In Active Directory Users and Computers, when navigating to Security > Advanced I am presented with the option Restore defaults. This restores the default permissions for the user object as it is ...
0
votes
1
answer
159
views
Kerberos "Ticket not yet valid" error when verifying service ticket in Node.js server
I am using the kerberos Node.js library to verify Kerberos service tickets. My setup includes:
Active Directory Windows Server on the network.
Linux server that verifies service tickets received from ...
1
vote
2
answers
114
views
Cannot read accountExpires attribute from Active Directory with Spring LDAP
I am using Spring Boot/Spring Data Ldap.
When I query users I cannot read accountExpires attribute, even when the property is shown in GetADUser.
I tried something like this:
return readTemplate()....