The VNC Manager - SmartCode Solutions Forum / SmartCode VNC Manager / Feature Requests / The List of Already Implemented Feature Requests / Active Directory Integration / Latest Posts

RE: Active Directory Integration

Support (s-code) — Thu, 21 Jan 2010 22:33:39 GMT

here is example how OUs should be entered. In our AD one of the branches looks like this
ad.scode (root) \ testlab computers \ servers

Below is the screenshot of how to fetch computers from the "servers" node only

You might ask why OUs in the LDAP subtree path are listed in reverse order?! This is by design of the LDAP search provider. You are supposed to feed it with search string that lists OUs in reverse order. Since not many users aware about this, what the VNC Manager does internally is creates two queries: one is exactly the same as the user entered it and another one with the elements in reverse order.

So this is just a small performance improvement hint, to make your queries work fast you should enter them in the reverse order. This way the VNC Manager would have to query AD only once.

RE: Active Directory Integration

kcp — Thu, 21 Jan 2010 22:17:44 GMT

Actually the problem isn't that I only see 1000 of the 10000 machines in our domain.

Rather, the probem is that I can't get a DSF to link to any OU in our Active Directory. I even tried to link it to a small OU with just 75 machines. And it just can't seem to see connect to the AD at all to see the OU structure.

I'm not sure I'm formatting my domain address and LDAP subtree properly in VNC Manager as I described in my previous post.

RE: Active Directory Integration

Support (s-code) — Thu, 21 Jan 2010 19:30:10 GMT

[quote][b]kcp (1/21/2010)[/b][hr]We are having the same problem linking a Dynamic Search Folder to any OU in our Active Directory. We have over 10K machines in our domain and I need to link at an OU level so that I only deal with my 1000 machines.

Our organization's domain address is windomain.location.org and our LDAP OU structure is

LDAP://OU=branch,OU=dept,DC=windomain,DC=location,DC=org

I put windomain.location.org in the domain address field and OU=branch,OU=dept in the LDAP subtree path, and click Test Connection and get error. If I try to network scan this DSF, nothing appears.

What format is required to define the LDAP location for a DSF?[/quote]

The problem with the 1000 machines limit has been fixed in the upcoming v5.5.3.0 CTP build. This build will be released sometime next week. Most probably on Tuesday 26th.

I just some insight on why only 1000 computers were returned by AD search. As we recently found out, by default, Active Directory's search provider returns only first 1000 items. To workaround this problem the application making AD query must configure AD search provider to fetch all the items rather than the first 1000.

RE: Active Directory Integration

kcp — Thu, 21 Jan 2010 14:59:23 GMT

We are having the same problem linking a Dynamic Search Folder to any OU in our Active Directory. We have over 10K machines in our domain and I need to link at an OU level so that I only deal with my 1000 machines.

Our organization's domain address is windomain.location.org and our LDAP OU structure is

LDAP://OU=branch,OU=dept,DC=windomain,DC=location,DC=org

I put windomain.location.org in the domain address field and OU=branch,OU=dept in the LDAP subtree path, and click Test Connection and get error. If I try to network scan this DSF, nothing appears.

What format is required to define the LDAP location for a DSF?

RE: Active Directory Integration

shane — Fri, 07 Aug 2009 07:10:38 GMT

With the latest beta (ver 5.0.5.0) this function now works like a dream! I don't know when this function started to work for me, but , yippeeee

RE: Active Directory Integration

graemelucas — Wed, 07 Jan 2009 23:26:38 GMT

I can confirm we have successfully integrated VNCM into our 2003 mixed mode domain.

We use it to pull out a list of domain controllers.

RE: Active Directory Integration

shane — Mon, 13 Oct 2008 08:19:26 GMT

Ok, with these settings

dc1.co.dodge.wi.us

OU=Juneau

Username co.dodge.wi.us\administrator

Clicking on the Test Connection gives me "Failed to extablish test connection" "There is no such object on the server"

I know it is not the logon credentials due to when I put a wrong password, it comes back with "Logon failure"

Thanks

RE: Active Directory Integration

Support (s-code) — Sat, 11 Oct 2008 02:49:38 GMT

There is no need need to enter DC=co,DC=dodge,DC=wi,DC=us, you already entered this information into the address field. Just enter OU=Juneau and it should work just fine.

RE: Active Directory Integration

shane — Fri, 10 Oct 2008 09:25:13 GMT

I did find the Active Directory Connection Settings. But I get errors.... This is what I have set

Domain Addres: dc1.co.dodge.wi.us

LDAP subtree path OU=Juneau,DC=co,DC=dodge,DC=wi,DC=us

User name: co.dodge.wi.us\administrator

password

I get the error "no such object on the server"

-Shane

RE: Active Directory Integration

Support (s-code) — Fri, 10 Oct 2008 09:02:29 GMT

Shane,
can I please clarify with you - are you aware that Dynamic Search Folders allow to scan an AD and also allow to specify lists of OUs to scan?

With regards of AD integration. In the nearest time in addition to the My Registered Computers, Entire Network root tree nodes, we are planning to add My Active Directories node. A user will be able to register an AD connection under this node and browse the AD in a way similar to the Registered Computers sub-tree.

Active Directory Integration

shane — Fri, 10 Oct 2008 08:52:57 GMT

It would be great to have the VNC manager use LDAP to scan a certain container/folder in AD at certain periods for changes in workstations. This way computer registration would be more automated. It would also be nice if the computer description (from AD) could be used for the "Name" of the workstation. Usually the Address and name are the same if Dynamic DNS is running in the environment.