Discussion Locked

How do you uses AD Distinguished Names

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

How do you use a DN (Distinguished name) to access an object?

Can someone give me an example of a practical way for a network administrator to use distinguished names? Please show syntax.

5 replies

by alveden

Your question is very broad and general, being more specific would help.

Anyway, DN is an unique id. Can be a user id, host id , etc depending on the schema.

Win2k use users DN for logon and authentication.
For example, your administrator's username would look something like this in DN form.

cn=administrator,cn=users,dc=foo,dc.com

for the domain foo.com.

ADS, essentially a ldap, you can use ldap command to view, add or modify object.

eg to match all object for the user tree,

ldapsearch -b "cn=users,dc=foo,dc=com" -D "cn=administrator,cn=users,dc=foo,dc.com" -w [Administrator password] "object=*"

They are a lot of practical ways to use DN, one obvious one is single sign on and integration with other ldap enable product. As for showing you how all this work .... the area is too broad .. u need to be specific

by northwood

Specifically, can I type a DN in to a DOS prompt and open an object? Can I type the DN into Start>RUN and open an object? Can I type the DN into a URL area of a Browser and access an object, or is a DN done in the back graound and the user neversees it?

by alveden

The anwser is all your question is no, on the basis that you are assuming DN, which is just a unique id, could be use like a command.

As I mention earlier, AD is an ldap, and ldap is just a database storing information about things like, printer setting/location, host information, user information, mail routing/hosting information, even DNS information and etc.

And DN is like a unique key to access these info. As mention earlier you need tools to access the ldap and use the infomation attached to the DN.

For example, you can write a script, access the info about a particular printer using DN of the printer. Then use the infomation about the printer to automatically map the printer on a particular pc. As for whether it will be tranparent or not, that will depend on your implementation.

by northwood

Thanks for your explanation. Do you know where I can find so information about tools I can use to implement DN or how to write scripts using DN?

This discussion is closed to new replies.