RE: [PHP] LDAP, Active Directory, and permissions
| From: | Chris Knipe | Date: | Wed, 01 Dec 2010 06:52:17 +0000 |
| Subject: | RE: [PHP] LDAP, Active Directory, and permissions | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-309783@lists.php.net to get a copy of this message | ||
Hi,
> Chris,
>
> 1) Shouldn't the OU security permissions be set within the AD itself?
> 2) If the above is done, then the user account that's being authenticated
> shouldn't be able to access privileged information.
1) Not sure. The permissions I'm after is similar to that of NTFS
permissions on the file system. Essentially, it is a way to restrict an
application to read certain OU's or Objects completely, making it invisible.
FYI... http://technet.microsoft.com/en-us/library/cc785913(WS.10).aspx
2) This is completely irrelevant to authentication. See point 1 above.
> Just curious, are you using phpldapadmin?
A modified version of adLDAP, http://adldap.sourceforge.net/
Regards,
Chris.