Adobe 38043740 - ColdFusion Standard - Mac Development Manual page 459

DEVELOPING COLDFUSION 9 APPLICATIONS
Accessing and Using Data
Action Required attributes
query server
add server
delete server
modify server
modifyDN server
Querying an LDAP directory
The cfldap tag lets you search an LDAP directory. The tag returns a ColdFusion query object with the results, which
you can use as you would any query result. When you query an LDAP directory, you specify the directory entry where
the search starts and the attributes whose values to return. You can specify the search scope and attribute content
filtering rules and use other attributes to further control the search.
Scope
The search scope sets the limits of a search. The default scope is the level below the distinguished name specified in the
attribute. This scope does not include the entry identified by the
start
attribute is "ou=support, o=adobe" the level below support is searched. You can restrict a query to the level of the
entry, or extend it to the entire subtree below the
start
Search filter
The search filter syntax has the form attribute operator value. The default filter, objectclass=*, returns all entries in the
scope.
The following table lists the filter operators:
Operator Example
=* (mail=*)
= (o=adobe)
~= (sn~=Hansen)
>= (st>=ma)
<= (st<=ma)
* (o=macro*)
(o=*media)
(o=mac*ia)
(o=*med*)
Optional attributes
, , ,
name start attributes port
scope
separator
, dn , attributes port
separator
,
dn port
, dn , attributes port
modifyType
, ,
dn attributes port
start
Matches
All entries that contain a mail attribute.
Entries in which the organization name is adobe.
Entries with a surname that approximates Hansen. The matching rules for approximate
matches vary among directory vendors, but anything that "sounds like" the search string
should be matched. In this example, the directory server might return entries with the
surnames Hansen and Hanson.
The name "ma" and names appearing after "ma" in an alphabetical state attribute list.
The name "ma" and names appearing before "ma" in an alphabetical state attribute list.
Organization names that start with "macro".
Organization names that end with "media".
Organization names that start with "mac" and end with "ia". You can use more than one *
operator in a string; for example, m*ro*dia.
Organization names that contain the string "med", including the exact string match "med".
Last updated 1/20/2012
, , , ,
username password timeout
, , , ,
filter sort sortControl startRow
,
delimiter
, username , password , timeout ,
, delimiter
, , , ,
username password timeout
, username , password , timeout ,
, separator , delimiter
, , , ,
username password timeout
attribute. For example, if the
start
entry.
454
, , ,
secure rebind referral
, ,
maxRows
secure , rebind , referral ,
, ,
secure rebind referral
secure , rebind , referral ,
, ,
secure rebind referral
start