Topic
  • 4 replies
  • Latest Post - ‏2014-05-31T06:03:11Z by _Roman_
_Roman_
_Roman_
12 Posts

Pinned topic ITIM 5.1: get AD Group DN in provisioning policy by AD Group name

‏2014-04-30T06:57:58Z |

Hello!

I need to get list of Active Directory Groups in my provisioning policy javascript.

I can get attribute eradgroupbasepoint, but I can't get array of AD Groups eradgroupdn.

I use such code:

var srv = new Service("erglobalid=3615535498917535673,ou=services,erglobalid=00000000000000000000,ou=Company,ou=itim");
var bp = srv.getProperty("eradgroupbasepoint");
var namegrp = srv.getProperty("eradgroupdn");
 
Tell me please, where I'm wrong?
And how can achieve the desired result?

Best regadrs,

Roman

Updated on 2014-04-30T11:19:57Z at 2014-04-30T11:19:57Z by _Roman_
  • RuneHL
    RuneHL
    11 Posts
    ACCEPTED ANSWER

    Re: ITIM 5.1: search AD Group DN in provisioning policy by AD Group name

    ‏2014-04-30T09:49:54Z  

    The groups on a service is stored as separate entities in LDAP - thus not as an attribute on the service. So to obtain a list of the groups you will have to do a search in the directory. Searching can be done using the java apis (if I remember correctly there is no direct JS method for this).

  • SourabhM
    SourabhM
    22 Posts
    ACCEPTED ANSWER

    Re: ITIM 5.1: search AD Group DN in provisioning policy by AD Group name

    ‏2014-05-31T05:07:50Z  
    • _Roman_
    • ‏2014-05-05T07:35:14Z

    Hello RuneHL!

     

    Maybe there is still some way? I need to get DN of group by its CN in Provisioning Policy...

     

    Best Regards,

    Roman

    Hi,

    RuneHL is correct.

    There is no OOB javascript extension available for group related. Hence, you need to create a javascript extension and use the either GroupSearch/GroupManager ITIM API to search the group based on name and then you can get the group dn from the return object.

    Regards,

    SourabhM

  • RuneHL
    RuneHL
    11 Posts

    Re: ITIM 5.1: search AD Group DN in provisioning policy by AD Group name

    ‏2014-04-30T09:49:54Z  

    The groups on a service is stored as separate entities in LDAP - thus not as an attribute on the service. So to obtain a list of the groups you will have to do a search in the directory. Searching can be done using the java apis (if I remember correctly there is no direct JS method for this).

  • _Roman_
    _Roman_
    12 Posts

    Re: ITIM 5.1: search AD Group DN in provisioning policy by AD Group name

    ‏2014-05-05T07:35:14Z  
    • RuneHL
    • ‏2014-04-30T09:49:54Z

    The groups on a service is stored as separate entities in LDAP - thus not as an attribute on the service. So to obtain a list of the groups you will have to do a search in the directory. Searching can be done using the java apis (if I remember correctly there is no direct JS method for this).

    Hello RuneHL!

     

    Maybe there is still some way? I need to get DN of group by its CN in Provisioning Policy...

     

    Best Regards,

    Roman

  • SourabhM
    SourabhM
    22 Posts

    Re: ITIM 5.1: search AD Group DN in provisioning policy by AD Group name

    ‏2014-05-31T05:07:50Z  
    • _Roman_
    • ‏2014-05-05T07:35:14Z

    Hello RuneHL!

     

    Maybe there is still some way? I need to get DN of group by its CN in Provisioning Policy...

     

    Best Regards,

    Roman

    Hi,

    RuneHL is correct.

    There is no OOB javascript extension available for group related. Hence, you need to create a javascript extension and use the either GroupSearch/GroupManager ITIM API to search the group based on name and then you can get the group dn from the return object.

    Regards,

    SourabhM

  • _Roman_
    _Roman_
    12 Posts

    Re: ITIM 5.1: search AD Group DN in provisioning policy by AD Group name

    ‏2014-05-31T06:03:11Z  
    • SourabhM
    • ‏2014-05-31T05:07:50Z

    Hi,

    RuneHL is correct.

    There is no OOB javascript extension available for group related. Hence, you need to create a javascript extension and use the either GroupSearch/GroupManager ITIM API to search the group based on name and then you can get the group dn from the return object.

    Regards,

    SourabhM

    Hi!

     

    Thank You for your reply!