TranslateName() fails   

Hi,

I am encountering a problem where a TranslateName() call is failing when
trying to translate from a name of the form "mydomain\userfoo" to a UPN
(e.g., userfoo@mydomain.com).

Some testing that I've done seems to indicate that if the original name
were of the form "mydomain.com\userfoo", rather than "mydomain\userfoo",
the TranslateName() succeeds, but the problem is that this is running
under IIS5 with Integrated Windows Authentication (IWA) enabled, and I
can't figure out how to get the name passed in with the domain suffix
(.com).

I'm doing this testing on a Win2K server machine that is a domain
controller, with IIS5 running on the same machine.

My apologies in advance.  I wasn't sure where this post might best fit,
but I thought I'd start here.  If it doesn't fit here, please let me
know, and point me to a more appropriate group.

Thanks!

Jim

date: Wed, 02 Nov 2005 02:19:43 -0500   author:   ohaya

Re: TranslateName() fails   

ohaya wrote:
> 
> Hi,
> 
> I am encountering a problem where a TranslateName() call is failing when
> trying to translate from a name of the form "mydomain\userfoo" to a UPN
> (e.g., userfoo@mydomain.com).
> 
> Some testing that I've done seems to indicate that if the original name
> were of the form "mydomain.com\userfoo", rather than "mydomain\userfoo",
> the TranslateName() succeeds, but the problem is that this is running
> under IIS5 with Integrated Windows Authentication (IWA) enabled, and I
> can't figure out how to get the name passed in with the domain suffix
> (.com).
> 
> I'm doing this testing on a Win2K server machine that is a domain
> controller, with IIS5 running on the same machine.
> 
> My apologies in advance.  I wasn't sure where this post might best fit,
> but I thought I'd start here.  If it doesn't fit here, please let me
> know, and point me to a more appropriate group.
> 
> Thanks!
> 
> Jim


Hi,

For the record, I've figured out what the problem was with
TranslateName().  

It wasn't the ".com" suffix.  Rather, from my testing, it looks like the
way that TranslateName() works for translation to UPN is that it
basically finds the entry matching the source name in AD, and then
attempts to retrieve and return the "userPrincipalName" attribute.  If
the userPrincipalName attribute is not populated in AD, TranslateName()
returns an error.

Once I populated/created userPrincipalName attribute in AD (using Active
Directory Users and...), TranslateName() worked ok.

Jim

date: Fri, 04 Nov 2005 10:36:57 -0500   author:   ohaya