RE: [PHP] LDAP, Active Directory, and permissions

2010-12-01 Thread Tommy Pham
> -Original Message- > From: Bob McConnell [mailto:r...@cbord.com] > Sent: Wednesday, December 01, 2010 5:23 AM > To: Chris Knipe; php-general@lists.php.net > Subject: RE: [PHP] LDAP, Active Directory, and permissions > > From: Chris Knipe > > > I&#x

RE: [PHP] LDAP, Active Directory, and permissions

2010-12-01 Thread Bob McConnell
From: Chris Knipe > I've found various sources and are successfully manipulating Active > Directory from PHP on our Domain Controller - frankly, things works much > better than I expected :) > > I have now reached the point where I need to set permissions on objects in > Active Directory, i.e. to

RE: [PHP] LDAP, Active Directory, and permissions

2010-11-30 Thread Tommy Pham
> -Original Message- > From: Chris Knipe [mailto:ckn...@savage.za.org] On Behalf Of Chris Knipe > Sent: Tuesday, November 30, 2010 10:52 PM > To: php-general@lists.php.net > Subject: RE: [PHP] LDAP, Active Directory, and permissions > > Hi, > > > Chri

RE: [PHP] LDAP, Active Directory, and permissions

2010-11-30 Thread Chris Knipe
Hi, > Chris, > > 1) Shouldn't the OU security permissions be set within the AD itself? > 2) If the above is done, then the user account that's being authenticated > shouldn't be able to access privileged information. 1) Not sure. The permissions I'm after is similar to that of NTFS permissions

RE: [PHP] LDAP, Active Directory, and permissions

2010-11-30 Thread Tommy Pham
> -Original Message- > From: ckn...@savage.za.org [mailto:ckn...@savage.za.org] On Behalf Of > Chris Knipe > Sent: Tuesday, November 30, 2010 4:47 AM > To: php-general@lists.php.net > Subject: [PHP] LDAP, Active Directory, and permissions > > Hi, > > I&#x

[PHP] LDAP, Active Directory, and permissions

2010-11-30 Thread Chris Knipe
Hi, I've found various sources and are successfully manipulating Active Directory from PHP on our Domain Controller - frankly, things works much better than I expected :) I have now reached the point where I need to set permissions on objects in Active Directory, i.e. to restrict read permissions