LDAP/AD - List of Users and User Attributes

I have successfully authenticated myself using Java/LDAP with a Active Directory, now I need to be able to retrieve the attributes of the users in the active directory.
My confusion is that I am not sure of the CN/OU/O/etc.. configurations, or how to determine what they are on my Active Directory Server. I understand that DC=host,DC=credit,DC=com is basically host.creditwave.com, but I need to be capable of retrieving an enumeration of users, and what object to cast them to etc...
Any help would be appreciated.
Regards,
Dean.

If you have access to the Active Directory itself, and it has the Win2k Support Tools installed on it, you can see the schema in terms of CN, OU etc. using ADSIEdit
Often though, for Users created on the AD itself, they can be found in
cn=Users,dc=yourdomain,dc=com
A user is generally listed as a "cn=User.Name".
If you create your InitialDirCtxt using the URL "ldap://adserver/dc=yourdomain,dc=com"
then you can search for Users with
initDirCtxt.search("cn=Users","(cn=*)",new SearchControls());
Another good way to figure out the schema is to download the excellent 100% Java LDAP Browser from
http://www.novell.com/coolsolutions/tools/1283.html

Similar Messages

LDAP Authentication Listing the users

Hi,
Iam new to OBIEE. I have LDAP authentication added to my repository.Please let me know how i can get the list of users in LDAP on to my OBIEE Presentation Catalog and Users so that I can classify them into various groups and add security feature.

If your user groups are held in LDAP you can pull them in as part of the authentication block my mapping the attribute to the GROUP variable.
Basic principle of using those groups and how the RPD interacts with presentation catalogue is explained well here :
http://obieeblog.wordpress.com/category/obiee/obiee-security/

User attributes for LDAP

Hi guys,
Currently we have an error for LDAP attribute .
distinguishedName = (String) user.getTransientAttribute("ldap.distinguished_name");
user is of type IUser.
and it return null
where could i find the list of user attributes in LDAP? currently we have LDAP 8.8.1.

Don,
you might should have a look at a LDAP Browser (eg. http://www-unix.mcs.anl.gov/~gawor/ldap/ ) which helps a lot to find out how the structure of your LDAP server is and which attributes you can access.
1) Start the tool
2) click onto the "Quick Connect"
3) enter you LDAP server
4) press "Fetch DNs"
5) Uncheck "Anonymous bind"
6) Enter your user credentials
7) Browse your LDAP structure
It helped me a lot to get the correct settings for the DBMS_LDAP calls.
Patrick
My APEX Blog: http://www.inside-oracle-apex.com
The ApexLib Framework: http://apexlib.sourceforge.net
The APEX Builder Plugin: http://apexplugin.sourceforge.net/ New!

LDAP User attribute in VC

With the USER DATA object in VC, I am able to get a list of user attributes available to the model (uniquename, first name, last name, address etc). One of the attributes we want is currently not in the list that shows up OTB. How can I add more LDAP attributes to show up in the USER DATA so that I can use them in my model?

Can't you use the default Identity Service functions for this ?
When you add an assign you have for example one like :
lookupUser
Gets the user object. If the user doesnt exist it returns null.
The signature of this function is ids:lookupUser(userName, realmName). The arguments to the function:
1) userName - a user name
2) realmName - The realm name. This is optional and if not specified default realm is assumed
Should be ok?

How can i extended attribute of user and add attribute to ldap

how can i extended attribute of user and add attribute to ldap
1.
i use spe to modified "Default User Library":add Field like
title:nation name:accounts[Lighthouse].nation
2.
modified "IDM Schema Configuration"
add <IDMAttributeConfiguration name='nation' description='default attribute from UserExtendedAttributes/UserUIConfig' syntax='STRING'/>
in <IDMAttributeConfigurations>
and
add <IDMObjectClassAttributeConfiguration name='nation' queryable='true' summary='true'/> in<IDMObjectClassConfiguration>
there is extended attribute when i create new user
3.
i create new resource to ldap,and i add nation in "Account Attributes" tab
but the new attribute not add to ldap
i am beginner,how to extended attirbute add add to ldap attribute?

So, if I want to fill in blanks on a form where I need to add more pages to fill history, what program do I need? In Adobe Reader, I can edit and fill in blanks, but I cannot duplicate more blank pages.

List users and their attributes

Hello,
We are on SRM 5.0 and I am looking for a report which lists users and their attributes. So for instance username / position and all catalogs assigned to them.
Thanks for your help!

Hi Antoinette,
There are no standard reports for this requirement. I have already posted a code sample for this requirement.
https://wiki.sdn.sap.com/wiki/display/SRM/CodeSample2-Reporttodisplayuserattributes
Hope this solves your problem.
Regards
Kathirvel

List all users and other information into application

Hi,
In the LDAP that we use, it contains - user id and xyz_code (this code is particular to application). Note that for each user_id there exists one xyz_code.
I can get the user id from IUser and xyz_code from an attribute app_xyz_code.
String xyzCode = sapume.getValue("app_xyz_code",iuser, true);
I have a requirement where I need to get user ids for a set of xyz_codes.
1) Suppose I have 100 xyz_codes I need to get 100 users from LDAP. So 100 times I need to hit LDAP. How do i make a search in LDAP using xyz_code. Is it preferrable to make a search like this?
2) Another thing I want to know is if it is possible to get all the users and their corresponding xyz_codes from LDAP and store them in a List/Vector/Enumeration. So that I can search in the list for user id corresponding to xyz_code.
Any code snippets is appreciated.
Thank you
Karthika

Thanks for your reply!
I tried the following:
$Users = get-aduser -SearchBase 'OU=Mes Utilisateurs,DC=itced,DC=lan' -filter '*'
$OU = $User.distinguishedname -split ',',2 | select -last 1
$output = @()
Foreach($User in $Users){
$budgetanalytics = Get-ADOrganizationalUnit -SearchBase $OU -Properties objectGUID
$Object = New-Object PSObject
$Object | add-member Noteproperty user $user.name
$Object | add-member Noteproperty OU $OU
$Object | add-member Noteproperty objectGUID $objectGUID
$output += $Object
$output
but I get the following
user
OU
objectGUID
User1
OU=Mon OU,OU=Mes Utilisateurs,DC=itced,DC=lan    {Microsoft.PowerShell.Commands.Internal.Forma...
User2
OU=Mon OU,OU=Mes Utilisateurs,DC=itced,DC=lan    {Microsoft.PowerShell.Commands.Internal.Forma...
Why do I get "Microsoft.PowerShell.Commands.Internal.Forma..." instead of the actual objectGUID of the Organizational Unit
Thanking you in advance

How to get user attributes from LDAP authenticator

I am using an LDAP authenticator and identity asserter to get user / group information.
I would like to access LDAP attributes for the user in my ADF Taskflow (Deployed into webcenter spaces).
Is there an available api to get all the user attributes through the established weblogic authenticator provider or do i have to directly connect to the LDAP server again?
Any help would be appreciated

Hi Julián,
in fact, I've never worked with BSP iViews and so I don't know if there is a direct way to achieve what you want. Maybe you should ask within BSP forum...
A possibility would be to create a proxy iView around the BSP iView (in fact: before the BSP AppIntegrator component) which reads the user names and passes this as application params to the BSP component. But this is
Beginner
Medium
Advanced
Also see http://help.sap.com/saphelp_nw04/helpdata/en/16/1e0541a407f06fe10000000a1550b0/frameset.htm
Hope it helps
Detlev

Editing LDAP User attributes from UME interface

Hi Gurus,
We want to develop a solution with user management screens in WD. These screens will provide password reset and unlock functionality for users. Our users are stored in LDAP. Current connection to LDAP is in Read Only manner.
I want to know
1. How to enable the connection from UME to LDAP in read/write manner?
2. What certificates need to be exchanged for write access? if any?
3. What changes needs to be done in config file of UME?
4. Which permissions should be granted for communication user to edit LDAP user attributes?
Even after performing the change to read LDAP in read/write manner, will it be sure: If we lock user from UME, it will lock LDAP user? please comment.
regards
Kedar Kulkarni

Hi,
We are half way into our application between UME and LDAP. We have developed screens and tested in our internal server. In internal landscape, UME is connected to LDAP in read only fashion. So when we try to create User, it gets created in UME.
But when we deploy same application into client landscape, we receive error as below:
No data source feels responsible for principal. Please check the data source configuration
Now we are not sure why this error is getting displayed.
In client landscape there are 2 LDAPs connected to UME, with only one LDAP in read/ write access.
Is there any way we can check which LDAP is being accessed by our code? Is there any concept of Default LDAP?
Any code to access LDAP details will help us lot.
regards
Kedar Kulkarni

Query list of users from LDAP

Hi Gurus,
I am trying to programatically query the list of users belonging to a particular user-group, from LDAP.
LDAP is deployed on Weblogic as a 'provider'.
I have the following details of the LDAP instance - host:port, security principal (CN=aaa,OU=bbb,OU=ccc,DC=ddd,DC=com), LDAP password (credential), User Base DN.
I tried the following using BPEL:
<sequence name="main">
    
    <receive name="receiveInput" partnerLink="bpelprocess1_client" portType="client:BPELProcess1" operation="process" variable="inputVariable" createInstance="yes"/>
    
    <assign name="Assign1">
      <copy>
        <from>ora:getContentAsString(ldap:listUsers('people','ou=people'))</from>
        <to>$outputVariable.payload/client:result</to>
      </copy>
    </assign>
    <reply name="replyOutput" partnerLink="bpelprocess1_client" portType="client:BPELProcess1" operation="process" variable="outputVariable"/>
</sequence>
</process>
and following is the content of the directories.xml that I have created:
<?xml version="1.0" ?>
<directories>
<directory name='people'>
<property name="java.naming.provider.url">ldap://<host>:<port></property>
<property
name="java.naming.factory.initial">com.sun.jndi.ldap.LdapCtxFactory</property>
<property name="java.naming.security.principal">CN=aaa,OU=bbb,OU=ccc,DC=ddd,DC=com</property>
<property name="java.naming.security.authentication">simple</property>
<property name="java.naming.security.credentials">password</property>
<property name="entryDN">User Base DN</property>
</directory>
</directories>
When I run this BPEL process, I get a blank value on my output variable -
<outputVariable>
<part name="payload">
<processResponse>
<result><users xmlns="http://schemas.oracle.com/bpel/ldap"/></result>
</processResponse>
</part>
</outputVariable>
Is there something I am missing here?
Regards,
Arindam

slight change in my approach here:
I would like to use welogic provider to connect to this LDAP
so... instead of MyProgram --> LDAP, it should now be MyProgram --> Weblogic/SecurityRealms/myrealm/Providers/myAuthenticator --> LDAP
in this guess, i wont be using LDAP connection details, instead the weblogic host/port and Authenticator name should be sufficient
How can I programatically query the list of users using this approach?

List all users and their OUs they belong to

Hi,
I would like to list all users with the OU they belong to and furthermore add an specific attribute that was added...
I can get both information separately:
get-aduser -SearchBase 'OU=DOMAIN,DC=mygroup,DC=re,DC=lan' | FT name
and
Get-ADOrganizationalUnit -SearchBase 'OU=DOMAIN,DC=mygroup,DC=re,DC=lan' -properties name,budgetanalytics | FT name,budgetanalytics
but I'd like to get the list containing user1, its OU, its budgetanalytics
Thanking you in advance,
Cédric

Thanks for your reply!
I tried the following:
$Users = get-aduser -SearchBase 'OU=Mes Utilisateurs,DC=itced,DC=lan' -filter '*'
$OU = $User.distinguishedname -split ',',2 | select -last 1
$output = @()
Foreach($User in $Users){
$budgetanalytics = Get-ADOrganizationalUnit -SearchBase $OU -Properties objectGUID
$Object = New-Object PSObject
$Object | add-member Noteproperty user $user.name
$Object | add-member Noteproperty OU $OU
$Object | add-member Noteproperty objectGUID $objectGUID
$output += $Object
$output
but I get the following
user
OU
objectGUID
User1
OU=Mon OU,OU=Mes Utilisateurs,DC=itced,DC=lan    {Microsoft.PowerShell.Commands.Internal.Forma...
User2
OU=Mon OU,OU=Mes Utilisateurs,DC=itced,DC=lan    {Microsoft.PowerShell.Commands.Internal.Forma...
Why do I get "Microsoft.PowerShell.Commands.Internal.Forma..." instead of the actual objectGUID of the Organizational Unit
Thanking you in advance

How to get list of groups and the users from OID

Hi,
Can someone please tell me how to get the list of GROUPS and all the USERS in each group in OID using Java. Need to recursively get all the Groups and Users in each group using Java any samples.
Thanks

use examples from OTN like
http://www.oracle.com/technology/sample_code/products/jdev/readmes/samples/ldapdatacontrol/ldapapplication/src/dc/ldap/model/LDAPSearch.java
and modify it to your needs
Bernhard

How to find out list of users and their access on Sharepoint

Hello Everyone
How can i find out list of users and what access they have on SharePoint site? I want to create table with list of the users and their access?
Thanks

you can get the report using below powershell scripts. first one gives list of users in a site collection level.
The second link generates the permissions reports for each user.
http://techtrainingnotes.blogspot.com/2010/12/sharepoint-powershell-script-to-list.html
https://sp2010userperm.codeplex.com/
My Blog- http://www.sharepoint-journey.com|
If a post answers your question, please click Mark As Answer on that post and Vote as Helpful

Switch from List of user to username and password fields?

I have my Login Window to display a List of Users by default.
Is there is shortcut key that switches to username & password fields so one can type in the username as well as the password?
I googled it and I found something like "hold opt+return and click on any username", does not work though...
I know that I can change it in System Pref. but it would be handy to know the shortcut key as well.
Thanks.

The "Option"-"Enter" trick should still work from the keyboard - use the arrow keys or type the first few letters of a listed name to highlight a username, then press "Option-Return":
http://docs.info.apple.com/article.html?artnum=25686
As I recall, to do the same thing with keyboard + mouse, the modifiers to be used when clicking did change between 10.3 and 10.4 so some of what you find on the web may be out of date.

Made a bad change to login options under user preferences, changed from "List of users" to "Name and password". I shut the computer down, now I can't login in when I turn the computer back on. What can I do to fix this problem?

Have Migrated data from IMAC to Macbook twice. Because I had too many admin ids under user and accounts preferences, I was trying not to delete the extras but that they wouldn't all show at login time. Under Login Options, I clicked out "List of Users" and clicked in "Name and password". Can't remember whether I did anything else. I shut down the computer and turned it back on to test the change. I get a dark grey screen with all my admin ids in circled pictures plus one for guest, but doesn't let me do anything with any of the admin ids. I clicked on any one and nothing happens. IF i click on the guest circle, it gives me a message that the computer will restart with only Safari allowed.
Since I haven't been able to connect my macbook to my IMac so I can login to the macbook through the Imac, I can't get to my macbook. There must be a way to fix this problem. I expected to see places to enter name and password but nothing is allowed to enter. Please help!

First thing I would do would be to boot in to Lion Recovery (Command+R on boot) and run Disk Utility, both disk and permissions repair.

LDAP/AD - List of Users and User Attributes

Similar Messages

Maybe you are looking for