Skip to main content
AM_99305866-Contributor
6-Contributor
Jul 14, 2023 9:01 PM UTC
Solved

Validating an LDAP user

Hello all,

 

My team and I have gotten LDAP working via an ActiveDirectoryDirectoryService, but need to be able to validate another user's non-admin credentials with LDAP, without logging the second user in.

 

What services exist for manually validating an LDAP credential? We've tried the TestConnection, GetDomainGroups, and IsValidGroup services on the ADDS with admin and personal credentials, and they only work for the administrator.

 

 

 

slangleyAnswer
Support
Jul 20, 2023 2:48 PM UTC

Hi @AM_9930586.

 

You can't use ThingWorx to manually validate LDAP users.  ThingWorx will only perform validation on an authentication request. 

 

If you do want to validate user details, you'll need to query your LDAP server directly.

 

Regards.

 

--Sharon

View in thread

2 replies

slangleyCommunity ManagerAnswer
Support
Jul 20, 2023 2:48 PM UTC

Hi @AM_9930586.

 

You can't use ThingWorx to manually validate LDAP users.  ThingWorx will only perform validation on an authentication request. 

 

If you do want to validate user details, you'll need to query your LDAP server directly.

 

Regards.

 

--Sharon

Translate
Constantine18-Opal
18-Opal
Jul 20, 2023 2:52 PM UTC

Hello,

 

For all of those services you mentioned, ActiveDirectoryDirectoryService tries to authenticate against LDAP with the credentials you pass into those services. It ignores admin credentials in the Configuration. It does not run an LDAP query for those credentials on behalf of the admin user. If your non-admin user cannot authenticate directly against your AD, then those services will all fail.

 

In other words, by passing credentials into those services, it behaves as if the "Dynamic User Login" checkbox was enabled.

 

/ Constantine

Translate
    Terms & ConditionsAccessibility statement