Software Interaction Problem with the LDAP Directory Service: Description, Resolving, Analysis

During the development of automated software packages for user authorization and granting access to network resources, there is a problem of software identification of the user of the directory service based on the LDAP database to a certain group of users. The standard Microsoft.NET Framework library, designed to perform basic operations on directory service objects, includes a special System.DirectoryServices library. The testing of this library has revealed that this mechanism only works properly with the group up to 1,500 members. This limitation of the System.DirectoryServices library remains uncorrected in all versions of.NET Framework. Wrong detection the group membership can lead to the dangerous situation when a authenticated user gets more large rights and privileges than it should or, on the contrary, does not get the necessary rights. The purpose of the article is to demonstrate how using of the library Novell.Directory.Ldap allows the administrator to produce the new working code for correct membership detection a certain user account in the user group.