LDAP users synchronization

i'm looking way synchronize users database between piece of software , ldap directory. i'm thinking of 3 possibilities keep track of specific user :

• guid : seems ad-specific guess other directories have equivalent unique identifier. can use ldap query (&(objectclass=user)(guid=xxx)) to user.
• samaccountname : ad-specific , searchable via ldap query
• path (dn) : should consistent accross different ldap providers. i'm using the system.directoryservices namespace, have do var userentry = new directoryentry(path, username, password); to user

there other possibilities achieve ? reliable way link users database ones ad directory ? impact of these solution in term of performances ?

hi strikebt,

i not expert in active directory.  just suggestion,

there attribute called objectguid. that present on every object. the  objectguid attribute protected cannot altered or removed. when store reference active directory object in external store (for example, database such microsoft® sql server ™ ), the  objectguid value should used. unlike distinguished name or relative distinguished name, can changed, guid never changes.

reference in object identity , uniqueness section.

http://technet.microsoft.com/en-us/library/cc977992.aspx

using ldap user synchronization

http://www.papercut.com.hk/product/papercut-mf/manual/ch-sys-mgmt-user-group-sync.html

anyway, should try, , make sure every property unique primary key.

best of luck!

kristin

---

we trying better understand customer views on social support experience, participation in interview project appreciated if have time. helping make community forums great place.
click here participate survey.

Visual Studio Languages  ,  .NET Framework  >  Visual C#