External site to query our LDAP

[HMCTech]

Got an external service that allows LDAP Authentication. Set up firewall to only allow queries from the external service IP address. but unfortunatly it's not working. I suspect because there is no username specified for the queries and I would need some sort of anonymous access? Does anyone know if you have to do anything extra to get this working rather than it being okay with a vanilla AD setup?

[powdarrmonkey]

Active Directory doesn't allow anonymous binds for lookups. You can enable this (Anonymous LDAP operations in Windows 2003 AD), or you can assign an account to the service.

[SYNACK]

For more security you could install ADAM Active Directory - Wikipedia, the free encyclopedia

and have the external service bind to that instead which would only expose the bare minimum information required Step-by-Step Guide to Deploying ADAM

[HMCTech]

Bit of an LDAP novice because never had to use it before for anything other than adding the correct base DN to moodle or such. But got an external service that wants anonymous access to ldap. Not sure how to set it up have followed a few articles but not sure how to test. doing a ldap://dc1:389 does not let you search for anyone. ldp.exe seems to do something but unaware of how this should function so unable to tell if its working.

 

how can I do a test of ldap being searchable from an external source?