Authenticate Active Directory user to access Domino Web Application

HCL Domino Domino Forum
1

Hi,I have an Domino Web Application and would like the Active Directory users access and working on the web application.

I have tried ADSync but this tool doesn’t help since users change their Internet password. ADSync cannot make synchronize automatically.

Can anybody help? Thank you.

Hoang

2

Subject: Authenticate Active Directory user to access Domino Web Application

other than having an app update the password in active directory when they change the password, one solid option would be to have your web application load an authentication page then redirect to the main section. For example, build an LDAP server using Active Direcory entries then create a servlet to query or install IBM HTTP Server somewhere and use it’s canned authentication piece to redirect to your web application. You didn’t mention the architecture so just throwing some ideas out there…

HTH

Geoff-

3

Subject: Authenticate Active Directory user to access Domino Web Application

Do you really need to use ADSync to synchronize the Domino and AD users?? Have you already tried using Directory Assistance to point to the AD LDAP server, or do the Domino users expect to be able to use their Domino HTTP password and not their AD password?

+Josh+

4

Subject: RE: Authenticate Active Directory user to access Domino Web Application

It does not obligate to use ADSync for the solution.

I have tried to use Directory Assistance to point to the AD LDAP server but it does not work. After configure Directory Assistance, I try to lookup AD LDAP user list from the new Memo on Notes client. The result is message: “LDAP server connection failed in SSL initialization attempt.”

My confuguration is:

host1_Win2000server: AD LDAP

host2-WinXP: Domino server 6.5 with Web application database.

I need AD LDAP users login to use the Domino Web App regardless the existence of Domino users.

5

Subject: RE: Authenticate Active Directory user to access Domino Web Application

Did you configure your Directory Assistance to point to AD properly?

You can use ldapsearch to try to connect to the AD server first to get the correct schema and username to use.