Score:1

How do I view contents of incoming bindRequests to Active Directory DS?

US flag

I have a full fledged AD DS running on Windows server 2016. I have a spring app which I am using to authenticate against my active directory database using a simple authentication bind over a ssl connection. I want to examine the contents of all incoming bindRequests to the AD server, whether they succeed or fail.

Furthermore, I want to troubleshoot whether the name form in the bind request is being matched against the CN or the displayName attribute of my user object. My CN and displayName are exactly the same for some users and different for some users so I want to view logs or something similar to be sure.

If Schannel is the solution for this, what should I use to filter the logs?

Any pointers would be much appreciated, Thanks.

user1686 avatar
fr flag
I don't think I've heard of AD DCs matching the bind name against _either_ the CN or the displayName at all? If you bind to a DN as is standard, then the full exact DN is matched. The only AD-specific alternatives are the UPN or the sAMAccountName.
us flag
You can turn on diagnostic logging to get more details about the connection: https://kb.wisc.edu/iam/page.php?id=35143
ThunderMead avatar
md
Thanks @twconnell that did the trick.
Score:0
us flag

I guess I'll just add my comment as an answer then ;)

You can turn on diagnostic logging to get more details about the connection:

https://kb.wisc.edu/iam/page.php?id=35143

I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.