Bill Baer outlines the required ports. If you want to test it, I created the People Picker Port Tester which you would run from the SharePoint server(s). The query is only done from the SharePoint server. End user machines do not need those ports open to the remote DCs.
TCP/UDP 135, 137, 138, 139 (RPC)
TCP/UDP 389 by default, customizable (LDAP)
The ObjectGUID is a binary string ( or octet string ), so what you are probably seeing is some random nonsense characters when you attempt display the value.
The ObjectGUID actually follows a well-established standard - it's a UUID version 4. With this information, you should be able to decode the binary string into a readable string representation.
In the end I used this document Configuration Example for OpenLDAP
Microsoft.Office.Server, Version=184.108.40.206, Culture=neutral,
You need a Windows User CAL to leverage SharePoint Foundation (doesn't matter how your users authenticate to it), that is how Foundation is provided "for free" (it isn't free).
For SQL, it depends on how you license it. SQL Express is "free", there are no specific license terms/CALs but there are serious limitations with the product.
For SQL Standard/...
There is an additional step of setting permissions on a registry key (if you have your accounts set up a certain way, i.e. not everything is running a the farm account, etc).
The keys are mentioned here:
and the specific step is pasted below for convenience:
Using JSOM you can find out whether the user is a domain user or not.
Deploy the web service under SharePoint context and use AJAX for getting the data.
Nope, SPD can't modify your Active Directory. You'll need some AD PowerShell, running on a domain controller, to do this.
One workaround, if you're working with the SP2013 workflow model you can expose a web service, and consume that web service from your workflow. But you'll need to implement that web service yourself.
This will depend on how aggressive your Azure AD Connect filters are. If these Security groups are not being synchronized, then you will have to modify your configuration to allow them to be synced to Office 365.
If you see them in your Admin portal under the Groups section, then they can be used in SharePoint groups for security.
To get the list of TIPs, run:
Get-SPTrustedIdentityTokenIssuer | Select Name
Then you can run:
$tip = Get-SPTrustedIdentityTokenIssuer "tipName"
If you only have one TIP, you can just run:
$tip = Get-SPTrustedIdentityTokenIssuer
What LDAPCP accomplishes is that it creates a connect to the on-premises directory (e.g. Active Directory) and resolves what ...
As you have found, configuring FBA is not trivial. MANY posts I have found just plain don't work. The best I have found is Mirjam's. She has two, I have used the one for SQL FBA and it works every time. Here is the link to her post on AD FBA: http://sharepointchick.com/archive/0001/01/01/configuring-claims-and-forms-based-authentication-for-use-with-an.aspx
If I understand correctly, you would like to windows authentication users logged in automatically using the popup, while also showing the login page for FBA users.
The big issue is that once you ask the browser to authenticate via AD, you won't be able to show a page until they respond to the AD login request - so you have to know in advance if the user ...
To mirror the TechNet thread, see http://thesharepointfarm.com/2013/04/sharepoint-foundation-2013-the-ldapmembershipprovider-and-ldaproleprovider-class/. The LdapMembershipProvider and LdapRoleProvider classes exist in Foundation 2013, but their methods have no logic in them and you'll have to develop your own provider.
Configuring the user profile service for Novell eDirectory is not exactly straightforward. The best guide (as usual) can be found on Spence Harbar's blog. He has an article dedicated to configuring this:
To modify the login name of an User I used the SPFarm object.
The code looks simple like this:
using (SPSite elevatedSite = new SPSite(url))
using (SPWeb web = elevatedSite.OpenWeb())
Out of the box no. You would need to create custom code or script that runs thru and captures your LDAP user permissions than assign those to the windows user.
Third party administrative products like Axceler ControlPoint and AvePoint DocAve, have this ability. While they are great tools, it's not very cost effective to deploy them for this single reason....