Classic ASP Discussion - LDAP (different from other posts!)

Print Page | Close Window

LDAP (different from other posts!)

Printed From: Web Wiz Forums
Category: General Discussion
Forum Name: Classic ASP Discussion
Forum Description: Discussion on Active Server Pages (Classic ASP).
URL: https://forums.webwiz.net/forum_posts.asp?TID=8000
Printed Date: 01 April 2026 at 2:33am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com

Topic: LDAP (different from other posts!)

Posted By: mendingo
Subject: LDAP (different from other posts!)
Date Posted: 11 December 2003 at 2:31am

I know there are tons of LDAP questions here, but this is slightly different.

I work in a school, and we want the students to be able to change their passwords, but we need to keep a record of them (since most students forget their passwords instantly). To this end, I have written a vbs script that updates the password via LDAP and also updates our database of passwords.

Now I want to put that functionality onto an intranet page so the students can use it.

The Script works perfectly when run as a .vbs file, but as soon as it's put into asp, the line,
GetObjet("ldap:\\cn=bob,ou=students,dn=blah...")
throws an "Internal asp error", but only when run from a machine that isn't the webserver. if the page is called from the webserver itself, it runs fine. I'm very puzzled.

I'm using IIS, and have the page using integrated windows authentication, and am logged in as admin on the machine, so it's probably not a permissions issue... or is it?

Does anyone have any ideas? Is there something that needs to be done differently when accessing LDAP from asp instead of WSH?

Replies:

Posted By: michael
Date Posted: 13 December 2003 at 8:53am

Sure is a permissions issue, if you use Windows Authentication and are logged in as admin you can change the password. Now the students log in with their credentials which do not have the rights to change their password. Now if it still does not work when YOU log in from a differennt machine then you are right and the error message in some more detail would help. (Is it an impersonation error??)

-------------
http://baumannphoto.com" rel="nofollow - Blog | http://mpgtracker.com" rel="nofollow - MPG Tracker

Posted By: mendingo
Date Posted: 15 December 2003 at 3:55am

It was indeed a permissions issue. I told IIS to use anonymous logins on that particular file, and gave the admin account as the anonymouse account to use, and it worked fine.

For some reason, using windows authentication, even admin can't connect, which is strange, but I can live with it!

Thanks!