07 April 2011 ~ 4 Comments

Renaming a single-label domain to a FQDN

TweetLong ago — eons, perhaps — before I had anything to do with the Windows environment here, someone created the AD domain in my company as a single-label domain (e.g. instead of “example.com” our domain is just “example”). Over the years this has led to lots of “fun” on the part of Windows admins who’ve [...]

Continue Reading

21 October 2010 ~ 0 Comments

Exchange 2010 Post-Upgrade weirdness: can't edit Mail Non-Universal Group or Security Group

TweetNow that everyone’s been moved to Exchange 2010 we’ve started using the 2010 Exchange Managment Console/Shell exclusively which has revealed some weirdness. First, we created a new group in AD using an old script (which used LDAP) and created a Mail-enabled Global Security group. We put people in the group, and everything seemed to be [...]

Continue Reading

26 August 2010 ~ 3 Comments

ldapsearch example on Active Directory

TweetJust putting this here for safekeeping since I couldn’t remember the exact syntax. [evan@ehoffman 10:35:50 ~]$ ldapsearch -x -LLL -D "ldapuser@example.com" -w password -b "OU=Users,DC=example,DC=com" -s sub -H ldaps://activedirectory.example.com "(sn=hoffman)" cn mail displayName samaccountname dn: CN=Evan Hoffman,OU=Tech,OU=Users,DC=example,DC=com cn: Evan Hoffman displayName: Evan D. Hoffman sAMAccountName: ehoffman mail: Evan.Hoffman@example.com Explanation: Connect to activedirectory.example.com using ldaps (SSL) [...]

Continue Reading

05 August 2010 ~ 0 Comments

Changing Active Directory Password in Browser through OWA 2010

TweetA few months ago I was on a quest to figure out how to change my Active Directory password via a browser (for Linux/Mac users). I finally figured it out, but since I’ve been working on this Exchange 2010 migration I noticed one of the features of OWA (Outlook Web App) in Exchange 2010 is [...]

Continue Reading

03 June 2010 ~ 0 Comments

Hygiene Management?

TweetI’m installing Exchange 2010 and in the docs it shows a bunch of groups that get created in the AD Schema during the domain prep part. After running prep, I looked to see if the groups were there, and sure enough they were (yay). What caught my eye was that one of the groups is [...]

Continue Reading

25 December 2009 ~ 2 Comments

Single sign-on with Linux clients and Active Directory LDAP, Part 1

TweetOne project we’ve been working on for a while is single sign-on across all our servers and other services (e.g. SVN repository, a few other things). One thing I wanted to avoid, I guess for mostly religious reasons, was reliance on a Windows instance for any of our production environment. The logical part of my [...]

Continue Reading