RE: securing AD parameters
- From: "Mulnick, Al" <Al.Mulnick@xxxxxxxxxx>
- To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
- Date: Fri, 25 Feb 2005 08:30:53 -0500
I think you answered your own question (well, almost).
What you want are rights assignments. It's not done via attribute per se,
but rather through permissions settings on the attributes. Often done via
schema if global.
What exactly do you need to accomplish? By default LDAP users can't browse
the directory in the first place without authentication.
There may be an easier way to do what you want, but we'll need more
information about the expected end state.
Al
-----Original Message-----
From: Dan HINCKLEY [mailto:danslists@xxxxxxxx]
Sent: Friday, February 25, 2005 3:25 AM
To: [ExchangeList]
Subject: [exchangelist] securing AD parameters
http://www.MSExchange.org/
Gentlemen,
Is there a way to set the security on an AD parameter (extensionAttribute1
for example) so that only specific users or groups can query it via LDAP?
I'm looking at keeping certain info in user objects secure from the general
LDAP user but accessible to those with the right to query it.
++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Dan Hinckley t: (41 22) 999 0183
Information Management Group f: (41 22) 999 0010
IUCN, The World Conservation Union e: dah@xxxxxxxxxxx
1196 Gland, Switzerland w: http://iucn.org/
The Last Page of the Internet: http://www.1112.net/lastpage.html
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
al.mulnick@xxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx
Other related posts:
