Confused about Windows AD logon name

[tetsu.soh]

Hello,

I am seeking some specification about Windows 2003 AD logon name. I googled
but cannot find any official document.

Here is my problem. I am trying to access Windows AD by Java JNDI api.
I can authenticate by: (algorithm is "Simple")
1. UPN, such as, username@...
2. DN, such as, cn=username, ou=member,dc=company,dc=com
and also with
3. RDN? such as, cn=username, I don't know exactly what is this but as long
as this name is unique on the domain, it works.

However, the last type logon name doesn't work with "Administrator". I
mean, I can authenticate with user principal as "cn=foo" but cannot
"cn=Administrator".
It seems that Administrator account is special.
I want to know why?

And I'd appreciate any information on this problem.

Best regards,
Tetsu

[Michael B Allen]

On 6/5/08, tetsu.soh@... <tetsu.soh@...> wrote:

> Hello,
>
>  I am seeking some specification about Windows 2003 AD logon name. I googled
>  but cannot find any official document.
>
>  Here is my problem. I am trying to access Windows AD by Java JNDI api.
>  I can authenticate by: (algorithm is "Simple")
>  1. UPN, such as, username@...
>  2. DN, such as, cn=username, ou=member,dc=company,dc=com
>  and also with
>  3. RDN? such as, cn=username, I don't know exactly what is this but as long
>  as this name is unique on the domain, it works.
>
>  However, the last type logon name doesn't work with "Administrator". I

Administrator@... or
CN=Administrator,OU=member,DC=company,DC=com should work. As you say,
you need to supply the UPN or DN.

Mike

--
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/