Table of Contents
Advertisement
This search shows the use of a logical AND statement in a filter. It returns one attribute, the
surname, that is used only for sorting the results.
In this query, the
department name. The other is People. This is because the Airius database uses the ou attribute
type twice:
•
In the distinguished names, at the second level of the directory tree, where it differentiates
between organizational units such as people, groups, and directory servers
•
As the department identifier in each person's entry
Because the attribute values are returned in order from the person entry to the directory tree root,
the
function extracts the person's department name.
ListFirst
Updating an LDAP directory
The
tag lets you do the following to LDAP directory entries:
cfldap
•
Add
•
Delete
•
Add attributes
•
Delete attributes
•
Replace attributes
•
Change the DN (rename the entry)
These actions let you manage LDAP directory contents remotely.
The following sections show how to build a ColdFusion page that lets you manage an LDAP
directory:
•
"Adding a directory entry" on page 489
•
"Deleting a directory entry" on page 493
•
"Updating a directory entry" on page 495
The form displays directory entries in a table and includes a button that lets you populate the
form fields based on the unique user ID.
The example ColdFusion page does not add or delete entry attributes or change the DN. The
sections
"Adding and deleting attributes of a directory entry" on page 496
directory entry's DN" on page 497
To keep the code short, this example has limitations that are not appropriate in a production
application. In particular, it has the following limitations:
•
If you enter an invalid user ID and click either the Update or the Delete button, ColdFusion
generates a "No such object" error, because there is no directory entry to update or delete. Your
application should verify that the ID exists in the directory before it tries to change or delete its
entry.
•
If you enter a valid user ID in an empty form and click Update, the application deletes all the
attributes for the User. The application should ensure that all required attribute fields contain
valid entries before updating the directory.
488
Chapter 23: Managing LDAP Directories
attribute value consists of two values in a comma-delimited list. One is the
ou
describe these operations.
and
"Changing a
Advertisement
Table of Contents
Troubleshooting
