Can I use active directory to validate users?

[dkentner]

I'd like to use LabVIEW and Active Directory to validate users and access levels of those users in the application. Any ideas?

[muks]

What is your lv version?

[dkentner]

I'm using LabVIEW 8.6.1 and soon to be using 2009.

We are using Windows Server 2003 but are migrating to Windows Server 2008.

[smercurio_fc]

Did you try a search? The easiest solution is to use .NET. A VI was posted in this thread.

[dkentner]

That thread was very useful. It got me started on the right path. I simply modified the "Directory Entry" constructor node to 'DirectoryEntry(String path, String username, String password) and it validates the username and password.

Next up is getting 'memberof' to work. The example code listed no groups for me, yet I know I am a member of several groups. I am not familiar at all with .NET, so this is very awkward for me. I did read something that stated I could be a member of a group but if the attribute isn't set (don't know what that means) then it wouldn't report the group name.

I'll keep digging.

[dkentner]

Got it! The issue turned out to be a mix of things.

First, the name I was entering into the 'Filter' property in the 'DirectorySearcher' property node didn't match the CN name defined in Active Directory. However, it did match the name of a computer! That is why I wasn't getting an 'member of' results - the computer isn't a member of any groups.

Next, the sAMAccountName is different than the CN name configured in Active Directory. So instead of filtering on 'CN=' I had to use 'SAMAccountName='.

From there, the results from the 'path' property in the 'SearchResult' property node had the correct 'CN' name, OU, and DCs to pull group names.

Maybe this is obvious to some, but I had to learn:

1. Make sure you have the correct LDAP attribute and name combination
2. Beware of computers and user accounts being named the same
3. Watch out for differences between CNs and SAMAccountNames 

For more info on LDAP Attributes, see this.

Message Edited by dkentner on 08-26-2009 06:23 AM

[KipK12]

Can you post what you found?  I am trying to do the same thing, but don't see where to get a output from the 'DirectoryEntry(String path, String username, String password) constructor.  I was expecting the properties to include something such as IsAuthenticated, but I'm stumped.

[A-T-R]

Hi kipk12,

this is quite old, but new for me.

I tried it out this way, just like dkentner described it...see the attachment!

And for your question for a "IsAuthenticated" reply: Just try it with a wrong combination of user and password...and you will get an "Exception". But I'm with you, a separate "answer" would be nice!

Another thing: Is there a place where all these things are documented, e.g. the "memberOf" property?

Regards

A:T:R

[Allison_M]

Hi A:T:R,

Here's a website that provides a good explanation of the memberOf attribute: http://www.rlmueller.net/MemberOf.htm.

Regards,

[Sreedhar_T]

Hi, I have LV2010. Can you plz downconvert the code and send it again.

Many Thanks.

Regards

Sreedhar