> -----Original Message----- > From: cknipe@xxxxxxxxxxxxx [mailto:cknipe@xxxxxxxxxxxxx] On Behalf Of > Chris Knipe > Sent: Tuesday, November 30, 2010 4:47 AM > To: php-general@xxxxxxxxxxxxx > Subject: LDAP, Active Directory, and permissions > > Hi, > > I've found various sources and are successfully manipulating Active > Directory from PHP on our Domain Controller - frankly, things works much > better than I expected :) > > I have now reached the point where I need to set permissions on objects in > Active Directory, i.e. to restrict read permissions to certain OUs and objects > within the directory (mainly related to Exchange stuff). > > Is there anything in PHP which can be used to set permissions on AD > objects? I haven't found any reference to doing this anywhere, so I thought > I'd give it a chance here... If not, then I suppose I'll have to code some ..NET > application to act as a gateway between the PHP interface and Active > Directory, but naturally I would like to do as much as possible from within > PHP itself. > > Many thanks, > > > -- > > Regards, > Chris Knipe Chris, 1) Shouldn't the OU security permissions be set within the AD itself? 2) If the above is done, then the user account that's being authenticated shouldn't be able to access privileged information. Just curious, are you using phpldapadmin? Regards, Tommy -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
