[jcifs] Confused about Windows AD logon name

Michael B Allen ioplex at gmail.com
Fri Jun 6 03:21:35 GMT 2008

On 6/5/08, tetsu.soh at nts.ricoh.co.jp <tetsu.soh at nts.ricoh.co.jp> wrote:
> Hello,
>  I am seeking some specification about Windows 2003 AD logon name. I googled
>  but cannot find any official document.
>  Here is my problem. I am trying to access Windows AD by Java JNDI api.
>  I can authenticate by: (algorithm is "Simple")
>  1. UPN, such as, username at domain.com
>  2. DN, such as, cn=username, ou=member,dc=company,dc=com
>  and also with
>  3. RDN? such as, cn=username, I don't know exactly what is this but as long
>  as this name is unique on the domain, it works.
>  However, the last type logon name doesn't work with "Administrator". I

Administrator at company.com or
CN=Administrator,OU=member,DC=company,DC=com should work. As you say,
you need to supply the UPN or DN.


Michael B Allen
PHP Active Directory SPNEGO SSO

More information about the jcifs mailing list