Windows 2000 Server and LDAP?

[Jerome]

Hi, this may sound stupid, but how do I enable LDAP service on a Windows
2000 domain server?

Or if it's enabled by default, how do I access it from a different
computer/server/Macintosh?

Thanks a lot!

[Paul Williams [MVP]]

When you promote a Windows Server to a domain controller it becomes, among
other things, an LDAP server.

If you have a specific reason for an LDAP server, such as for an
application, you might be better off using ADAM (Active Directory
Application Mode) - a free download for Server 2003 or part of R2.

You access LDAP via a number of mechanisms - such as LDAP tools, ADSI
scripts, etc.

[Jerome]

Thanks, well in fact I want to access the LDAP from a Mac OS X server,
so I've got access to the domain users, passwords etc ...

Seems like I have to figure that out myself?

Post by Paul Williams [MVP]
When you promote a Windows Server to a domain controller it becomes, among
other things, an LDAP server.
If you have a specific reason for an LDAP server, such as for an
application, you might be better off using ADAM (Active Directory
Application Mode) - a free download for Server 2003 or part of R2.
You access LDAP via a number of mechanisms - such as LDAP tools, ADSI
scripts, etc.

[Paul Williams [MVP]]

Post by Jerome
Seems like I have to figure that out myself?

Possibly not. However I've hardly used a MAC so I can't help with that end.
I've cross-posted this into the win2000 MAC group though.
--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net


"Jerome" <***@gmail.com> wrote in message news:%***@TK2MSFTNGP14.phx.gbl...
Thanks, well in fact I want to access the LDAP from a Mac OS X server,
so I've got access to the domain users, passwords etc ...

Seems like I have to figure that out myself?

Post by Jerome
When you promote a Windows Server to a domain controller it becomes, among
other things, an LDAP server.
If you have a specific reason for an LDAP server, such as for an
application, you might be better off using ADAM (Active Directory
Application Mode) - a free download for Server 2003 or part of R2.
You access LDAP via a number of mechanisms - such as LDAP tools, ADSI
scripts, etc.

Post by Jerome
Hi, this may sound stupid, but how do I enable LDAP service on a Windows
2000 domain server?
Or if it's enabled by default, how do I access it from a different
computer/server/Macintosh?
Thanks a lot!

[William Smith]

How do you access Windows LDAP from a Macintosh?

You probably want to "bind" your Mac OS X machine to Active Directory.
This uses the AD Plugin found in the Directory Access application found
in the Mac's Utilities folder.

For an introduction, see this page
<http://www.certmag.com/articles/templates/cmag_howto.asp?articleid=1269&
zoneid=91>

Your Mac can use AD for authentication and for contact information.
Authentication will allow you to have your users log in to the Mac just
as Windows users log in to their computers when joined to a domain.
Contacts will allow your Mac's Address Book application to search AD for
contacts. This can be used with Apple's Mail program for email.

Entourage 2004 does not use AD via the AD Plugin but it can be pointed
to your LDAP server to look up contact information as well.

If you'll post back how you'd like to use your LDAP server on the Mac, I
can probably point you in the right direction.

Hope this helps! bill
--
William M. Smith
(Microsoft Interop MVP)

Post by Paul Williams [MVP]

Post by Jerome
Seems like I have to figure that out myself?

Possibly not. However I've hardly used a MAC so I can't help with that end.
I've cross-posted this into the win2000 MAC group though.
--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net
Thanks, well in fact I want to access the LDAP from a Mac OS X server,
so I've got access to the domain users, passwords etc ...
Seems like I have to figure that out myself?

Post by Jerome
When you promote a Windows Server to a domain controller it becomes, among
other things, an LDAP server.
If you have a specific reason for an LDAP server, such as for an
application, you might be better off using ADAM (Active Directory
Application Mode) - a free download for Server 2003 or part of R2.
You access LDAP via a number of mechanisms - such as LDAP tools, ADSI
scripts, etc.

Post by Jerome
Hi, this may sound stupid, but how do I enable LDAP service on a Windows
2000 domain server?
Or if it's enabled by default, how do I access it from a different
computer/server/Macintosh?
Thanks a lot!

[Joe Kaplan (MVP - ADSI)]

You just need some way to perform LDAP queries on the Mac side, such as with
an LDAP browser or code you write to any LDAP V3 compliant programming
model.

You can't read anyone's passwords via LDAP though. You can change them and
reset them if you are an admin, but you can't ever read them.

Joe K.

Thanks, well in fact I want to access the LDAP from a Mac OS X server, so
I've got access to the domain users, passwords etc ...
Seems like I have to figure that out myself?

Post by Paul Williams [MVP]
When you promote a Windows Server to a domain controller it becomes,
among other things, an LDAP server.
If you have a specific reason for an LDAP server, such as for an
application, you might be better off using ADAM (Active Directory
Application Mode) - a free download for Server 2003 or part of R2.
You access LDAP via a number of mechanisms - such as LDAP tools, ADSI
scripts, etc.

[Paul Nelson]

Post by Jerome
Hi, this may sound stupid, but how do I enable LDAP service on a Windows
2000 domain server?
Or if it's enabled by default, how do I access it from a different
computer/server/Macintosh?
Thanks a lot!

First, you may be able to join the OS X server to your domain using Apple's
built in Active Directory software. While logged into the server, launch
the Directory Access application (in /Applications/Utilities), then double
click on Active Directory.

You might also want to check out ADmitMac from Thursby which also provides
this capability with a lot of other features.

http://www.admitmac.com

Paul Nelson
Thursby Software