Introduction
This document describes how to find the user mapping to check whether a user ID matches the correct AD user.
Background Information
When the ADSync process takes place on the connector, it exports all the required active directory data to files on disk and they are usually human-readable (text).
Find the Current User on the Computer
- On the user computer, open a command prompt and run:
- For Windows:
nslookup -type=txt debug.opendns.com.
- For Linux/Mac:
dig txt debug.opendns.com.
- The output is similar to:
nslookup -type=txt debug.opendns.com.
Server: 192.168.1.10
Address: 192.168.1.10#53
Non-authoritative answer:
debug.opendns.com text = "server your-opendns-va"
debug.opendns.com text = "appliance id 007a2c2d"
debug.opendns.com text = "host id a9b331e8f177c757b151c900df98d861"
debug.opendns.com text = "user id 4907f8d4a18f122bf8f8b2709dae99ab"
Find the Corresponding User on the Connector
- The user id field is the information we are looking for, take note of that id, in this case: 4907f8d4a18f122bf8f8b2709dae99ab
- Now, log into the server running the connector component
- Navigate to C:\Program Files\OpenDNS\OpenDNS Connector\ADSync
- Open the file UserStruct.ldif
- Search for the string taken from the nslookup command: 4907f8d4a18f122bf8f8b2709dae99ab
- Find the Hash file associated with the user, in this case John Doe and the output looks similar to:
dn: CN=John Doe,OU=Users,OU=Corp,DC=Example,DC=com
changetype: add
memberOf: CN=Test-Group,OU=Groups,OU=Users,OU=Corp,DC=Example,DC=com
memberOf: CN=Staff,OU=Groups,OU=Users,OU=Corp,DC=Example,DC=com
Hash: 4907f8d4a18f122bf8f8b2709dae99ab
Feedback