Configuring Contextless Login to Search Part of the Tree
Novell Cool Solutions: Tip
By Debbie Carraway
|
Digg This -
Slashdot This
Posted: 9 Nov 2001 |
I wanted to use the LDAP contextless login extensions from the dirExperts download. However, I needed to be able to search just a part of the tree, and did not want to change the chaining behaviour of our LDAP servers.
The non-LDAP version (lgnclw32.dll) has instructions for configuring "pruning" to restrict the contexts that are searched, but the LDAP version (lgncxw32.dll) does not have a documented way to specify a search base.
I used Sysinternals Regmon to see what happens when the LDAP contextless login extension does a search, and it looks like pruning might be there though undocumented. The login extension looks in:
HKLM\Software\Novell\Trees\myTreeName\CxPruning
for a dword value called "UsePruning" with a value of 0x00000001. You just substitute your tree's name for myTreeName.
Then it reads the subkeys within >:myTreeName<\CxPruning. You can create multiple keys here to specify the search base, using LDAP syntax (use commas instead of periods in the distinguished name).
For example, I created some keys with names like:
OU=Users,O=MyOrg
O=MoreUsers
Be aware that it is looking for *keys* with those names, not values.
Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com