LiveDocs Comments - coldfusion - 6 - Developing_ColdFusion_MX_Applications_with_CFML - LDAP7.htm

coldfusion/6/Developing_ColdFusion_MX_Applications_with_CFML/LDAP7.htm

jrunrandy — 2005-03-24T12:49:09

You will get a better and quicker answer by posting questions like this to the online forums: http://webforums.macromedia.com/

coldfusion/6/Developing_ColdFusion_MX_Applications_with_CFML/LDAP7.htm

2005-03-18T11:35:23

Hi Everyone,

I am trying to make an LDAP query with SSL, my query connects without SSL, in my code. I have SSL setup on the server that it is talking to, that works correctly, confirmed it with the LDAP browser provided by Microsoft. The problem is that it does not connect with my code that is at port 636 and CFBasic, I am suppose to import the CA certificate or ldap certificate so ColdFusion understands it with this command -->
--------------------------
X:\CFusionMX7\runtime\jre\bin\keytool.exe -import -keystore cacerts -file {C:\web.cer} -alias ldapserver-cert -storepass xxxxxxx

//XXXX means password provided
--------------------------
It gives me an error stating it cannot find the file, the file is there, i checked it, Any ideas on what the heck I am missing in this? Macromedia also states that I should import the CA certificate or the ldap certificate(where are they usually located on a enterprise certificate server?????), can I use any certifcate? I checked with ColdFusions website the code is exact for the import command. I am kinda lost at this point.

Thanks,
Ross

coldfusion/6/Developing_ColdFusion_MX_Applications_with_CFML/LDAP7.htm

jrunrandy — 2005-03-14T13:56:44

kh91 e-mailed me to say that the problem is fixed:
***
Actually I solved it. I assumed that the username would be in
DN format if you do that then ColdFusion gives you the error I mentioned.
If you just use the raw username it works.
***

coldfusion/6/Developing_ColdFusion_MX_Applications_with_CFML/LDAP7.htm

jrunrandy — 2005-03-14T13:13:34

LiveDocs does not receive enough traffic to handle questions like this effectively. You will get a better and quicker response by posting your issue to the online forums: http://webforums.macromedia.com/coldfusion/

coldfusion/6/Developing_ColdFusion_MX_Applications_with_CFML/LDAP7.htm

kh91 — 2005-03-09T10:14:13

Has anyone gotten this working with Windows Server 2003?

I'm trying to do a simple query to return info for a single user. I have not set up SSL security on the Windows server side, if I attempt the query without doing a bind (username= password=) then I get a "You must bind inorder to perform this query" back from Windows. If I add username/password I get ColdFusion blowing up with the "Inappropriate authentication" message.

This works FINE using perl, or PHP from the same computer, it's only with ColdFusion it won't work. Help please?

coldfusion/6/Developing_ColdFusion_MX_Applications_with_CFML/LDAP7.htm

Cubonic — 2004-10-18T23:13:59

I had a similar problem updating group membership. I found that the problem was due to the dn being miss interpreted. In particular the commas in the dn caused the were interpreted as additional values for the attributes. This problem can be worked around by changing the separator character.

For instance
after setting up all the appropriate coldfusion variables


<CFSET userdn="CN=#id#,#accountTree#">
<CFLDAP SERVER="#ldapServer#"
USERNAME="#ldapAdmin#"
PASSWORD="#ldapPassword#"
SEPARATOR="&"
DN="#group#,#groupTree#"
ACTION="Modify"
MODIFYTYPE="Add"
ATTRIBUTES="member=#userdn#"
>

coldfusion/6/Developing_ColdFusion_MX_Applications_with_CFML/LDAP7.htm

J.C. — 2004-10-13T08:56:44

Can you elaborate more on updating Active Directory attributes. I've been successful updating the homePhone, cn, samaccountname attributes, but I've had no luck updating the group membership attribute, "memberof". I've discovered that you must update the "member" attribute of a group, but I've only had luck updating the "description" field of a group and the "member" field throws me errors. I'm hoping you can give detail as to how this attribute is updated.

Thank you!

coldfusion/6/Developing_ColdFusion_MX_Applications_with_CFML/LDAP7.htm

thecoolcoder — 2003-12-10T12:09:31

Why do you not elaborate on SSL v3 method using SSL_CLIENT_AUTH attribute? I have found nothing that is self explanatory anywhere.

coldfusion/6/Developing_ColdFusion_MX_Applications_with_CFML/LDAP7.htm

halL — 2003-09-10T09:13:07

You should not specify a cert7.db file.
See the comment by sgilson102 in the livedocs comments on the cfldap reference page,
http://livedocs.macromedia.com/coldfusion/6/CFML_Reference/Tags-pt165.htm

coldfusion/6/Developing_ColdFusion_MX_Applications_with_CFML/LDAP7.htm

cfugottawa — 2003-09-10T07:40:56

I think you have to add to the secure attribute. Currently you have secure="cfssl_basic" but the documentation says you need to have something like: secure="cfssl_basic,c:\cfusion\ldap\cert7.db

coldfusion/6/Developing_ColdFusion_MX_Applications_with_CFML/LDAP7.htm

2003-09-02T18:11:57

(SSL + LDAP) doesn't work

I have installed a CA and issued a Certificate to my DC (Windows 2003 DC) and it is serving requests via SSL on port 636

But all I get is the following:
Connection to LDAP Server failed
This is my code:

name="results"
attributes="sn,givenname,department,telephoneNumber,mobile,mail"
start="cn=users,dc=Domain,dc=local"
filter="(objectclass=user)"
server="10.10.1.13"
username="doamin.local\adminaccount"
password="adminpassword"
secure="cfssl_basic"
port=636>

If I remove the Secure and Port 636 I get the following:

Inappropriate authentication
I think because MS Win2K3 makes you use SSL so you can't send clear text password to LDAP.

Please Help!