Next Active Directory Integration
  • Getting Started
  • Installation
  •  Migration
    • Single Site
    • Network
    • Export previous configuration
  • Security considerations
  •  Networking
    • Encryption with TLS
    •  Single Sign On
      • SSO with IIS on Windows
      • NTLM SSO with Apache on Windows
      • Kerberos SSO with Apache on Linux
      • Kerberos SSO with Apache on Windows
      • Kerberos Error Codes
      • Troubleshooting
      • Configure browsers to use Kerberos
      • Accessing WordPress without a valid SSO user
  •  Configuration
    • Profile
    • Environment
    •  Multisite configuration
      • Profile assignment
      • Profile options
      • Common use cases
    • User
    • Password
    • Permissions
    • Security
    • SSO
    •  Attributes
      • Adding LDAP attributes to the Global Catalog
    • Sync to AD
    • Sync to WordPress
    • Logger
  •  Usage
    •  How to add a cron job on Windows
      •  Scheduled tasks and cron jobs on Windows
      • How to add a cron job via Wp Crontrol
      • How to add a cron job on Linux
    •  Premium extensions
      •  BuddyPress Simple Attributes
        • Convert Manager attribute
        • Convert Name attribute
      • BuddyPress Profile Photo
      • WooCommerce Login
      • UltimateMember Login
      • User Photo integration
      • Profile Pictures
      • Custom Role Management
      • WP-CLI
      • Active Directory Forest
    •  API
      • Lifecycle
      • Authentication
      • Authorization
      • Synchronization
      • User
      • LDAP
      • Logging
    •  Technical details
      • Startup process
      • Authentication process
      • Verification process
      •  Active Directory internals
        • Account Lockout Policy
        • Find slow LDAP queries
        • Kerberos principals
        • Users
      • Synchronization of security groups
      •  Fixing issues related to Kerberos
        • Unsupported encryption types between Samba and Active Directory
        • Recreate a Keytab for an existing SPN
      • WordPress authentication workflow
    •  FAQ
      • Running NADI in large enterprises
      • Running NADI on WP Engine
      • Running NADI on SiteGround
      • How to trigger authentication for custom URL
      • Connecting NADI to Synology Directory Server
      • Using NADI with Duo Security
      • Changing WordPress AUTH SALT constant
    • Privacy Policy
    Download
    Professional support and premium extensions
    Maintainer's homepage
    Help/Support/Bugs

    Follow @dreitier

    Follow @schakko

    Technical details Active Directory internals

    April 26, 2026 at 11:05 PM

    Must-reads for Active Directory internals

    • How Active Directory Searches Work
    • How the [Active Directory] Data Store Works
    • How do I convert a SID between binary and string forms?
    • Previous
    • Next