Method to Search User Account in AD?

Question

HI All,
I have a requirement, that, I have to find a User Account in AD. Based on that i have to set another variable with either True / False.
Is there any method to do the search in Resource? (like the 'testUser' method from FormUtil class searches user account in IDM. It returns True if the user exists in IDM else it returns False.)
Like this, Is there any method to do the search in Resource?
Replies appriciated.
Thanks

Answer 1

Hi,
this method is called 'getResourceObjects' .
sometime ago I had to search for groups in AD. I is similar to your problem.
First you set a searchFilter which has to be in LDAP notation (use google for that).
Variable ADResName is the name of your AD Resource in IDM. Variables groupName_global
and groupName_local are 2 AD group names like MyGroup1 and MyGroup2.
and then call 'getResourceObjects' method:
  <block>
        <set name='searchFilter'>
          <concat>
            <s>(|(CN=</s>
            <ref>groupName_global</ref>
            <s>)</s>
            <s>(CN=</s>
            <ref>groupName_local</ref>
            <s>))</s>
          </concat>
        </set>
        <dolist name='adgroup>
          <invoke name='getResourceObjects' class='com.waveset.ui.FormUtil'>
            <select>
              <ref>:display.session</ref>
              <invoke name='getLighthouseContext'>
                <ref>WF_CONTEXT</ref>
              </invoke>
            </select>
            <s>Group</s>
            <ref>ADResName</ref>
            <map>
              <s>searchContext</s>
              <ref>base-context</ref>
              <s>searchFilter</s>
              <ref>searchFilter</ref>
              <s>searchScope</s>
              <s>subtree</s>
              <s>searchAttrsToGet</s>
              <List>
                <String>description</String>
                <String>samAccountName</String>
              </List>
            </map>
          </invoke>
          <appendAll name='adgroups>
            <get>
              <ref>adgroup</ref>
              <s>accountId</s>
            </get>
          </appendAll>
          <appendAll name='directories'>
            <get>
              <ref>adgroup</ref>
              <s>samAccountName</s>
            </get>
          </appendAll>
        </dolist>
      </block>Instead of <s>Group</s> I think you might need something like <s>User</s> .
base-context is something like this (have a look into your AD Controller):
<set name='base-context'>
               <s>ou=juhu,dc=com,dc=waveset</s>
</set>I hope this helps a little bit.