How to use the UME api in order to search the LDAP?

Question

Hello,
I have an application which connects to the LDAP the portal is connecting to and search users according to a certain search criteria.
Here is the relevant piece of code:
Hashtable env = new Hashtable();
DirContext ctx = new InitialDirContext(env);
SearchControls controls = new SearchControls();
String filter = "firstName=..."
NamingEnumeration results = ctx.search("OU=OUs", filter, controls);
I would like to do this same search using the UME API.
Can someone please show me the equivalent code to it using the UME API?

Answer 1

Hi Roy,
you find the Configuration File you are using in your portal via System Administration -> System Configuration -> UM Configuration -> Data Sources
or in sapume.properties where you can find
##xml file that configures the persistence except roles
ume.persistence.data_source_configuration=YOUR_DATASOURCE_CONFIG_FILE.xml
In this xml file, there is the entry
<principal type="user">:
<principal type="user">
     <nameSpaces>
     <nameSpace name="com.sap.security.core.usermanagement">     
<attributes>                               
<attribute name="firstname" populateInitially="true"/><attribute name="displayname" populateInitially="true"/>               <attribute name="lastname" populateInitially="true"/>                    <attribute name="fax"/>                         <attribute name="email"/>                    <attribute name="title"/>               <attribute name="department"/>                    <attribute name="extensionAttribute2"/>               <attribute name="mobile"/>          <attribute name="telephone"/>                    <attribute name="streetaddress"/>               <attribute name="pobox"/>                    <attribute name="location"/>               <attribute name="telephoneShort"/>               </attributes>
     </nameSpace>
     <nameSpace name="com.sap.security.core.usermanagement.relation">
     <attributes>
     <attribute name="PRINCIPAL_RELATION_PARENT_ATTRIBUTE"/>
     </attributes>
     </nameSpace>
    </nameSpaces>
</principal>
According to your company LDAP attributes, you will have to extend the above attributes, telephoneShort for example is an attribute within our company.
The UME API does the rest.
All you have to do, is request the right attribute (in my above example it was the last name).
(Sorry for the format, but it is quite cumbersome to format it properly with the available editor   )
Kind regards,
Rebecca