| Author |
Message
|
| wmqstankela |
 Posted: Tue Feb 07, 2017 5:34 am Post subject: IIB integration with AD |
 |
|
Voyager
Joined: 29 Feb 2016
Posts: 94
|
Hi all,
I need IIB to communicate with Active Directory, not only for authenticate users, but also for read some data from AD.
I want to send AD some users attribute and to read some other attribute of that user. Something like some connector to AD or calling some API or something third...
Is this possible? |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Tue Feb 07, 2017 5:43 am Post subject: Re: IIB integration with AD |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| wmqstankela wrote: |
Hi all,
I need IIB to communicate with Active Directory, not only for authenticate users, but also for read some data from AD.
I want to send AD some users attribute and to read some other attribute of that user. Something like some connector to AD or calling some API or something third...
Is this possible? |
With a lot of help from your AD folks, you can treat it like an LDAP.
Have fun 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| smdavies99 |
| Posted: Tue Feb 07, 2017 5:48 am Post subject: |
|
|
Jedi Council
Joined: 10 Feb 2003
Posts: 6076
Location: Somewhere over the Rainbow this side of Never-never land.
|
This question has been asked before (At least once). The Google search feature on this page is your friend.
_________________
WMQ User since 1999
MQSI/WBI/WMB/'Thingy' User since 2002
Linux user since 1995
Every time you reinvent the wheel the more square it gets (anon). If in doubt think and investigate before you ask silly questions. |
|
| Back to top |
|
|
| Vitor |
| Posted: Tue Feb 07, 2017 5:56 am Post subject: Re: IIB integration with AD |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| wmqstankela wrote: |
| Is this possible? |
If you're running on Windoze, there may be some APIs you can exploit from .NET.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| wmqstankela |
| Posted: Tue Feb 07, 2017 6:05 am Post subject: |
|
|
Voyager
Joined: 29 Feb 2016
Posts: 94
|
|
| Back to top |
|
|
| Vitor |
| Posted: Tue Feb 07, 2017 6:23 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
Then as my worthy associate points out, you need to treat it like LDAP and see what you can squeeze out.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| zpat |
| Posted: Tue Feb 07, 2017 6:30 am Post subject: |
|
|
Jedi Council
Joined: 19 May 2001
Posts: 5866
Location: UK
|
Set up an IIB security profile to reference your LDAP server (AD) to start with.
_________________
Well, I don't think there is any question about it. It can only be attributable to human error. This sort of thing has cropped up before, and it has always been due to human error. |
|
| Back to top |
|
|
| wmqstankela |
| Posted: Tue Feb 07, 2017 6:31 am Post subject: |
|
|
Voyager
Joined: 29 Feb 2016
Posts: 94
|
| Ok, but how to read some users attributes from LDAP? |
|
| Back to top |
|
|
| Vitor |
| Posted: Tue Feb 07, 2017 6:36 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
Find some jar files and write some code.
You have a non-standard requirement. This will not be met by out of the box technology.
As previously stated, you'll need the help of your AD team.
You might also want to think long and hard about why you need user attributes and if there's any other way to achieve the requirement.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| wmqstankela |
| Posted: Tue Feb 07, 2017 6:49 am Post subject: |
|
|
Voyager
Joined: 29 Feb 2016
Posts: 94
|
| Ok, thanks Vitor for help. |
|
| Back to top |
|
|
| Gaya3 |
| Posted: Tue Feb 07, 2017 6:56 am Post subject: |
|
|
Jedi
Joined: 12 Sep 2006
Posts: 2493
Location: Boston, US
|
for the support monitoring purpose I have created the one using Java which access AD and gets authenticated. there are quite number of java apis to call LDAP
_________________
Regards
Gayathri
-----------------------------------------------
Do Something Before you Die |
|
| Back to top |
|
|
|
|
