MIDRANGE dot COM Mailing List Archive



Home » MIDRANGE-L » November 2008

Re: Exchange 2007



fixed

On Thu, Nov 13, 2008 at 5:00 PM, Bill Meecham
<BMeecham@xxxxxxxxxxxxxxxxxxxx> wrote:
Ok, the story is that they're just accessing the Contacts entries....and now that I asked that question, I got more details... They are trying to script it. Every new contact is getting the default email address, they want to delete that and they want complete maintenance access to custom attribute 1 and can't figure that out.

Okay, so we are talking about Contact Objects in Active Directory, not
about the Exchange Information Store.

Active Directory consists of multiple technologies, the core of which
is a standard LDAP server.

A quick google search showed that you can use the standard LDAP Unix
API on the i.

http://publib.boulder.ibm.com/html/as400/v4r5/ic2962/info/apis/ldap_intro.html

There are newer docs about this topic, but this is what i quick google
search sput out.

Then, all you need are proper credentials - someone needs to create an
account with the proper permissions.

DO NOT USE A DOMAIN ADMINISTRATOR ACCOUNT

Sorry for the caps, but i see that mistake far to often. Assign
granular permissions to a single account that allows update of
extensionattribute1 and the email fields. Depending on what exactly
you want to achieve with the email fields, using a proper address
policy might be the easier way.

Use LDAP/SSL to access this, as the IBM i can't easily do secure
kerberos authentication. In this case, SSL will provide the same
security as using Kerberos auth.

Remember: Active Directory resides on Domain Controllers, not on
Exchange servers - so you need to connect to a DC.






Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2014 by MIDRANGE dot COM and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available here. If you have questions about this, please contact