Active Directory UDF - Help & Support (III)

[davzell13]

2 and 0

[water]

@error = 2 stands for: $sOU does not exist

[davzell13]

yes i have see that on the udf but i don't understand why.

if you look the attached screen i have the Users OU no ?

[water]

You need to specify $sOU as FQDN. Example (taken from the UDF Header documentation): OU=sampleou,OU=sampleparent,DC=sampledomain1,DC=sampledomain2

[davzell13]

like this ?

$sOU = '"OU=Users,DC=test,DC=local"'
$sUser = "Test"
$sCN = "Server-Name"

$iResult = _AD_Open("Administrateur", "Adm-Password", "DC=test,DC=local", "Server-Name.test.local", "CN=Server-Name,DC=test,DC=local")
MsgBox(48, "resultat", $iResult )

_AD_CreateUser($sOU, $sUser, $sCN)

 

Edit, it's works, but only on a computer on the domain. Not on workgroup computer 

 

 

Edited August 2, 2017 by davzell13

[water]

Define "does not work". As mentioned above, please provide some information about the error.

[davzell13]

_AD_Open  dosn't works.

$iResults return 0.

If it works the variable return1.

 

EDIT: in  CN= i have write the name of my domain controller. Is it true ? 

$iResult = _AD_Open("Administrateur", "Adm-Password", "DC=test,DC=local", "Server-Name.test.local", "CN=Server-Name,DC=test,DC=local")

Edited August 2, 2017 by davzell13

[water]

How to connect to a domain is described in the wiki.

[davzell13]

i have read the wiki and use this script on my domain controler to have good information to add in my _AD_Open

#include <AD.au3>
_AD_Open()

ConsoleWrite($sAD_DNSDomain & @CRLF)
ConsoleWrite($sAD_HostServer & @CRLF)
ConsoleWrite($sAD_Configuration & @CRLF)
_AD_Close()

 

but same error with the good information 

$iResult = _AD_Open("Administrateur", "Adm-Password", "DC=test,DC=local", "Server-Name.test.local", "CN=Configuration,DC=test,DC=local")

 

edit: if i add @error i have error 4  and @extended 2147016646

Edited August 2, 2017 by davzell13

[water]

Please insert

_AD_ErrorNotify(2)

before _AD_Open to get more detailed error information.

[davzell13]

[water]

Could you please try one of the other two possible ways to provide the UserId as described here?

Quote

NetBIOS Login Name e.g. "microsoft\DJ"
User Principal Name e.g. "DJ@microsoft.com"

So LDAP knows that it shouldn't use the local Administrator.

[davzell13]

same error, but i have tested on two different server and the code works.

I think I know where the problem may come from.

the domain is: test.local

and the computer out of domain is in workgroup named: test

 

Can not it be a problem?

[water]

Could be, yes. But I'm not sure.

[davzell13]

hello Water, i have a new error.

My script works well now on computer out of domain.

 

Now i try to use my script since a WinPE (from Windows 10 64bits source). I have a COM error (800401F3) .

i think it's because is it a limited Windows with not all the Dll of Windows or something like this.

 

do you have an idea ?  Dll to integrate in my WinPE ?

 

thanks

 

[water]

For Windows PE you need what is described here.

[davzell13]

it works, thanks Water.

[water]

[JonF]

I'm trying to set up a remote LDAP query.  I want to use SSL, of course.  My code is:

_AD_Open("<redacted>\<redacted>", "<redacted>", "", "mail.<redacted>.com", "", 3)

If the last parameter is 1, it works.  If the last parameter is 3 it doesn't, see the image. It does the same thing if I am really remote or in the office.  The server has a valid GoDaddy certificate.  Do I need a client certificate?

I can't figure out the extended code, it looks like a hex value interpreted as a signed integer but I don't know how to convert it.

Edited August 28, 2017 by JonF

[water]

Correct. In hex it is 0x80020009. This simply means: An error has occurred (and hence doesn't help much).
Can you please add

_AD_ErrorNotify(2)

at the top of your script so we get meaningful COM error Information?