ADSI Does a Simple Bind When You Specify ADS_USE_SSL (321315)

MORE INFORMATION

As an example, in the following code a simple bind occurs because the ADS_USE_SSL flag is specified. The credentials that will be used are the Anonymous account's credentials. In this example, a query on a field that requires domain account credentials occurs. Because credentials are not provided, a default to the Anonymous account credentials occurs, and no records are found.

Private Sub Command1_Click()
    Dim cn As ADODB.Connection
    Dim cmd As ADODB.Command
    Dim rs As ADODB.Recordset
    Dim strLdapPort As String
    Dim strServerDomainName As String
    Dim strSamAccountName As String
    

    'Bind to AD0 using OLE DB Provider for Microsoft Directory Services
    Set cn = New ADODB.Connection
    cn.Provider = "ADsDSOObject"
    cn.Properties("ADSI Flag") = ADS_SECURE_AUTHENTICATION Or ADS_USE_SSL
    cn.Properties("Page Size") = 99
    cn.Open

    'Create the command object to query AD
    Set cmd = New ADODB.Command
    Set cmd.ActiveConnection = cn
    cmd.CommandType = adCmdText

    strServerDomainName = "domain.com"
    strSamAccountName = "myname"
    cmd.CommandText = "Select AdsPath From 'LDAP://" & _
        strServerDomainName & "' where objectClass='user' and & _
        objectcategory='person'and SamAccountName='" & _
        strSamAccountName & "'"

    'Create the record set for the command results
    Set rs = New ADODB.Recordset
    Set rs = cmd.Execute

    If rs.EOF Then
        MsgBox ("No records found")
    Else
        strADsPath = rs.Fields("AdsPath")
        MsgBox ("strADsPath=" & strADsPath)
    End If
    rs.Close
    cn.Close    
    Set cmd = Nothing
    Set rs = Nothing
    Set cn = Nothing
End Sub
				

You can modify this code to not use the "ADSI Flags" property, and instead complete a server bind that specifies that the SSL port (636) be used. Because the SSL port is specified, the traffic is encrypted by using SSL. The "ADSI Flags" are not specified, so ADSI automatically tries to bind by first using Kerberos or NTLM before an attempt to use basic authentication occurs. If you run this code while you are logged on to the domain, this code returns a recordset because the credentials that are being used would be either Kerberos or NTLM.

Private Sub Command1_Click()
    Dim cn As ADODB.Connection
    Dim cmd As ADODB.Command
    Dim rs As ADODB.Recordset
    Dim strLdapPort As String
    Dim strServerDomainName As String
    Dim strSamAccountName As String
    

    'Bind to AD0 using OLE DB Provider for Microsoft Directory Services
    Set cn = New ADODB.Connection
    cn.Provider = "ADsDSOObject"
    ' Removed the line to set ADSI Flags automatically
    cn.Properties("Page Size") = 99
    cn.Open

    'Create the command object to query AD
    Set cmd = New ADODB.Command
    Set cmd.ActiveConnection = cn
    cmd.CommandType = adCmdText
    ' This next line has changed
    strServerDomainName = "domain.com:636"
    strSamAccountName = "myname"<BR/>

    '... Code continues unchanged from here....
				

For additional information about ADSI (including the Help file), please visit either of the following Microsoft Web sites.

ADSI Overview

MSDN Search