• Retrieve an NT domain user's e-mail address from MS Exchange Server and automatically save it in user's profile

• Only works with NT Auto-Login set

• If you'd like to change this MOD to work with any type of NT login, feel free.


• Port 389 must be open for TCP communications if your Exchange Server is behind a firewall where the forum web server may not be able to access. That port must be opened to allow LDAP communication.

'Multi-domain NT authentication MOD
sub NTAuthenticate()
	dim strUser, strNTUser, checkNT, strNTUserEmail
	dim oMailbox 'Exchange Mailbox
	dim aUser

	strNTUser = Request.ServerVariables("AUTH_USER") 
	strNTUser2 = replace(strNTUser, "\", "/")
	aUser = split(strNTUser2, "/")

	if Session(strCookieURL & "userid") = "" then
		strUser = strNTUser
		Session(strCookieURL & "userid") = strUser
	end if

	if strNTGroups="1" then
		strNTGroupsSTR = Session(strCookieURL & "strNTGroupsSTR")
		if Session(strCookieURL & "strNTGroupsSTR") = "" then
			Set strNTUserInfo = GetObject("WinNT://"+strNTUser2)
			For Each strNTUserInfoGroup in strNTUserInfo.Groups
				strNTGroupsSTR=strNTGroupsSTR+", "+strNTUserInfoGroup.name
			NEXT
			Session(strCookieURL & "strNTGroupsSTR") = strNTGroupsSTR
		end if
	end if
	
	if strAutoLogon="1" then
		strNTUserFullName = Session(strCookieURL & "strNTUserFullName")
		if Session(strCookieURL & "strNTUserFullName") = "" then
			Set strNTUserInfo = GetObject("WinNT://"+strNTUser2)
			strNTUserFullName=strNTUserInfo.FullName
			Session(strCookieURL & "strNTUserFullName") = strNTUserFullName
			
			'E-mail address retrieval from Exchange Server
			'LDAP://[server]/cn=[username],cn=Recipients,ou=[organizational unit],o=[organization]
			Set oMailbox = GetObject("LDAP://kawexc/cn=" & aUser(1) & ",cn=Recipients,ou=Keystone,o=Keystone Automotive")
			strNTUserEmail = oMailbox.Mail
			Session(strCookieURL & "strNTUserEmail") = strNTUserEmail
		end if
	end if
end sub

strSql = strSql & ", " & "'" & ChkString(Request.Form("Email"),"email") & "'"

		If strAutoLogon = "1" then
			strSql = strSql & ", " & "'" & Session(strCookieURL & "strNTUserEmail") & "'"
		Else
			strSql = strSql & ", " & "'" & ChkString(Request.Form("Email"),"email") & "'"
		end if

quote:

---

Anyone else using this?

---

quote:

---

Try using this script with a user who does not have an associated Exchange account (a not unknown occurrence) and watch it fall over. I have a half-baked solution to this that requires you adding

'The (On Error Resume Next) is there to prevent an error code stopping the page if no email found.

On Error Resume Next

To the top of the Sub to get it to return nothing (rather then a Script error), you will need to then add some conditional code to check if you got an e-mail or not.

---

Yeah, this I know. I've been planning on looking at the code again to make it foolproof...

quote:

---

The other bug bear is that it requires your Exchange short common name to equal your NT logon, not all company’s and exchange admins do this, and there is no guarantee this will work 100% of the time even if your Exchange CN is the same as you NT account as there are normally exceptions for whatever reason. There are about 15 exceptions in our 2000 user Exchange/NT setup.

Eg,..

User JWILLIS on NT = User DJWILLIS on Exchange.
So the code returns an error or no e-mail address as user JWILLIS was not found on Exchange.

I have a (mostly working) solution (using very similar base code) but it relies on registering DLL's (ADSecurity.DLL) from the ADSI SDK to work as it compares the unique ID (serial number of an NT account) with the unique ID of an exchange account and returns no value if none found or the e-mail if it is found. This should work even in the example above (basically, if outlook can get there e-mail from there NT account, so can this code).

---

I'd love to add this capability into the mod and provide instructions. Willing to share?

quote:

---

That said the code is a really nice example of how to use LDAP. Most of this is just nit picking.

---

I don't think you're nitpicking. If someone doesn't review my work, I'll think that it's perfect. There's always room for improvement, handling of situations I never thought of... two brains are better than one.

Mike
http://www.sumovw.com/
http://www.sumovw.com/forum/
http://www.sumofx.com/

quote:

---

I'd love to add this capability into the mod and provide instructions. Willing to share?

---

quote:

---

Hi

just wanted to check if any code was released. I could really benefit from getting the Exchange email address.

thx
GReg

---

quote:

---

Bump


Any thing on this?

---

quote:

---

It's nice to see you're still checking in on this. As of yet, nothing. Our project that involved the Snitz forum got shelved for the time being, so I have not worked on any of this code for quite a while. I have not forgotten about it, though.

---

quote:

---

The other bug bear is that it requires your Exchange short common name to equal your NT logon, not all company’s and exchange admins do this, and there is no guarantee this will work 100% of the time even if your Exchange CN is the same as you NT account as there are normally exceptions for whatever reason. There are about 15 exceptions in our 2000 user Exchange/NT setup.

Eg,..

User JWILLIS on NT = User DJWILLIS on Exchange.
So the code returns an error or no e-mail address as user JWILLIS was not found on Exchange.

quote:

---

I have a (mostly working) solution (using very similar base code) but it relies on registering DLL's (ADSecurity.DLL) from the ADSI SDK to work as it compares the unique ID (serial number of an NT account) with the unique ID of an exchange account and returns no value if none found or the e-mail if it is found. This should work even in the example above (basically, if outlook can get there e-mail from there NT account, so can this code).

---

---