RE: AS/400 LDAP client

Glenn, 

The LDAP APIs were written by Unix weenies,  for Unix weenies, and are not
The easiest to use - they are not that hard but are tedious.  If Java is an
Option you may want to check into JNDI - there are many examples on the net
Showing how to do everything from authentication against AD to user
provisioning in AD.

Kurt

> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-
> bounces@xxxxxxxxxxxx] On Behalf Of Glenn McClenny
> Sent: Tuesday, October 25, 2005 10:03 AM
> To: midrange-l@xxxxxxxxxxxx
> Subject: Re: AS/400 LDAP client
> 
> We're running a Windows 2000 exchange server that houses our corporate
> email
> system information (name, email address, departments, groups, etc) via
> active directory.  I've searched the Midrange-L discussions and found LDAP
> api's that will allow us to retrieve this information from active
> directory.
> 
> Our ultimate goal is to tie the information we have in Microsoft's active
> directory with CGI programs (or standard green-screen applications where
> needed).  Plus, we'd like to add, change, delete from active directory
> (again, the api's for this are listed in a copybook available from this
> message group) on a limited basis.  Retrieve information often, add/update
> information rarely.
> 
> For instance, we have many CGI programs written for remote access by our
> stores.  The vast majority of these CGI programs require the user to sign
> on
> (our web-based intranet applications require an AS/400 user profile).  I
> want to get the department that this user is in, and this information is
> in
> active directory.
> 
> I'm trying to figure out how to set up both the AS/400 and our Microsoft
> active directory so that this information can be shared, and was hoping to
> get a nudge in the right direction.  I may be asking in the wrong message
> group, and if so I apologize for that.
> 
> 
> >From: Mike Wills <koldark@xxxxxxxxx>
> >Reply-To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
> >To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
> >Subject: Re: AS/400 LDAP client
> >Date: Tue, 25 Oct 2005 08:40:31 -0500
> >
> >What are you trying to do? Allow users to log into green-screen via LDAP?
> >If
> >so, there is something called Enterpise Identity Mapping (I believe). I
> am
> >sure I will be corrected if that isn't correct.
> >
> >On 10/25/05, Glenn McClenny <gmcclenny@xxxxxxxxxxx> wrote:
> > >
> > > I've searched for information on how to retrieve data from an active
> > > directory on a Windows server. I found Scott's information here about
> >the
> > > API's used to retrieve the data. My questions is how to set up the
> >AS/400
> > > to be an LDAP client? And, if anybody knows where I can find the steps
> > > needed to set up the Windows server? I keep seeing Kerberos and things
> >of
> > > that sort (I'm not a Windows person by the way). Thanks for your
> input!
> > >
> > > Glenn
> > >
> > >
> > > --
> > > This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> > > list
> > > To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> > > To subscribe, unsubscribe, or change list options,
> > > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> > > Before posting, please take a moment to review the archives
> > > at http://archive.midrange.com/midrange-l.
> > >
> > >
> >
> >
> >--
> >Mike Wills
> >koldark@xxxxxxxxx
> >http://mikewills.name
> >Want Gmail? Email koldark+gmail@xxxxxxxxx to get on my waiting list.
> >
> >"There are 10 types of people in the world: those who understand binary,
> >and
> >those who don't." -Unknown
> >--
> >This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> >To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> >To subscribe, unsubscribe, or change list options,
> >visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> >or email: MIDRANGE-L-request@xxxxxxxxxxxx
> >Before posting, please take a moment to review the archives
> >at http://archive.midrange.com/midrange-l.
> >
> 
> 
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.