关于使用SAMAccountName语法进行Active Directory用户查找

huangapple go评论70阅读模式
英文:

Regarding active directory user lookup with SAMAccountName syntax

问题

我们正在尝试从我们的活动目录中搜索用户详细信息,具有以下层次结构。

域 - dom

森林 - dom.cumul

用户名以“dom\user.name”的形式给出,如果hosts文件中存在域和IP的映射,则允许使用该用户名登录。但不允许搜索用户名。

根据technet.microsoft.com上的上述链接,在Windows 2003服务器之后,未验证使用smaAccountName语法进行查找。我会在验证帐户后附上链接。请确认是否可以使用“domain\user_name”语法执行活动目录用户查找。当我们使用userPrincipalName时,它正确检索用户详细信息。使用的协议是LDAP,使用的语言是JAVA。

根据下面的链接,SAMAccount登录名用于支持运行较早版本操作系统的客户端和服务器,例如Windows NT 4.0,Windows 95,Windows 98和LAN Manager。
https://learn.microsoft.com/en-us/windows/win32/adschema/a-samaccountname

这是否意味着Microsoft已将SAMAccount用于最新Windows操作系统?

英文:

We are trying to search for user details from our active directory with the following hierarchy.

domain - dom

forest- dom.cumul

the username is given as "dom\user.name" with this syntax if a mapping for domain and IP is present in hosts file it allows login with the username. But doesn't allow searching for the username.

https://gallery.technet.microsoft.com/scriptcenter/4398ce37-67ac-4074-97f1-66db51ff0308#content.
As per the above link on technet.microsoft.com, the lookup with smaAccountName syntax is not verified after the windows 2003 server. I'll attach the link once the account is verified. Can i please get a confirmation if its possible to perform an active directory user lookup with "domain\user_name" syntax. When we use userPrincipalName it retrieves the user details correctly. The protocol used is LDAP and the language used in JAVA.

As per the below link SAMAccount logon name used to support clients and servers running earlier versions of the operating system, such as Windows NT 4.0, Windows 95, Windows 98, and LAN Manager.
https://learn.microsoft.com/en-us/windows/win32/adschema/a-samaccountname

So does that mean Microsoft has deprecated the use of SAMAccount for the latest windows OS?

答案1

得分: 1

sAMAccountName属性仍然可用于登录。但请记住,sAMAccountName不包括域。

因此,如果给定DOMAIN\user_name,那么sAMAccountName只是user_name,您将搜索(sAMAccountName=user_name)来查找帐户。

英文:

The sAMAccountName attribute can still be used for logging in. But keep in mind that the sAMAccountName does not include the domain.

So if you are given DOMAIN\user_name, then the sAMAccountName is just user_name, and you would search for (sAMAccountName=user_name) to find the account.

huangapple
  • 本文由 发表于 2020年1月6日 18:57:19
  • 转载请务必保留本文链接:https://go.coder-hub.com/59610847.html
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定