Newbie having trouble with first AD installation

  • Thread starter Thread starter Collin
  • Start date Start date
C

Collin

Hi,

I've got a need to set up a simple Active Directory installation that lets
me manage users and groups of users. I bought ActiveDirectory For Dummies
because I knew nothing about it.

The book is OK, but I'm having a problem that I suspect is mostly if not
completely due to my ignorance on this subject.

I'm using a Java LDAP applet to browse my LDAP/AD installation, and it does
not list any content under what I am calling the root (e.g.
"dc=mycompany,dc=com"). Pointing this same tool to "dc=umich,dc=edu" gives
me four organizational units under it, so I'm pretty sure it's not the
tool's problem. Also, when I point it to my AD installation, I _do_ get a
list of attributes for "dc=mycompany,dc=com", but no children underneath it.

Specifically, I have an OU called "Employees", that contains a list of test
users I created. I also assigned these users to groups. I'd like to be
able to see that OU under "dc=mycompany,dc=com".

I am using the default object hierarchy and schema that AD comes with on a
Windows 2000 Server install. I have already updated my registry so that I
can make modifications to the schema. Is modifying my schema somehow the
next step? The book was not completely clear on this subject.

The applet can be found at http://www.mcs.anl.gov/~gawor/ldap

I apologize if I am posting to the wrong place -- this seemed like the best
choice.

thanks!
Collin
 
I tried out ldapbrowser -- it is much better than the java applet I was
using -- thanks!

However, I got the same results when I tried to connect. In the messages
section of ldapbrowser, it lists 0 attribute types, 0 object classes, and
everything else likewise 0.

I suspect this is my problem.

How might I get my OU and users to show up below the root? Is there
something special I have to activate in the objects and attributes
configuration? It shows up fine when managing the OUs and Users and Groups
using mmc on the Win2k Server machine on which AD is running. Just not when
browsing via LDAP from my client machine.

Oh, and I am binding anonymously.

Thank you very much- -

Collin
 
Here are the steps I took to connect to my AD with the LDAP browser:

File > New Profile
Name > company.com, Next
host > domaincontroller.company.com, then click on Fetch DN's and choose
DC=company,DC=com
(Don't tick the anonymous bind button)
User DN > DN of my user account eg. CN=Simon,OU=Users,DC=company,DC=com
Finish

This got me connected no problem.
 
Back
Top