VBScript to retrieve group-user membership

Question

Hi all,
I'm trying to retrieve the membership of users from a group using a
VBScript from a windows machine. I'm able to retrieve all groups in a
certain OU.. and connect to each of those groups to retrieve the name,
hoever, when i try to retrieve the objGroup.member attribute, the result
is an empty array. What is the correct (or working) way of retrieving
that information.
-Const ADS_SCOPE_SUBTREE = 2
'eDir
strSource="eDirectory"
'ActiveDir
strTarget="ActiveDirectory"
strNDSUserName="cn=admin,o=eDir"
strPassword="P@ssw0rd"
Set objConnection = CreateObject("ADODB.Connection")
Set objCommand = CreateObject("ADODB.Command")
objConnection.Provider = "ADsDSOObject"
objConnection.Properties("User ID") = strNDSUserName
objConnection.Properties("Password") = strPassword
objConnection.Open "ADSI"
Set objCommand.ActiveConnection = objConnection
objCommand.Properties("Searchscope") = ADS_SCOPE_SUBTREE
objCommand.CommandText = "SELECT entryDN FROM 'LDAP://" & strSource &
"/ou=Groups,o=eDir' WHERE structuralObjectClass='groupOfNames'"
Set objRecordSet = objCommand.Execute
objRecordSet.MoveFirst
Do Until objRecordSet.EOF
Wscript.Echo objRecordSet.Fields("entryDN").Value
strEntryDN=objRecordSet.Fields("entryDN").Value
Set objGroup = GetObject ("LDAP://" & strSource & ":389/" &
strEntryDN)
objGroup.getInfo
Wscript.echo objGroup.Name & " is the Name"
wscript.echo TypeName(objGroup.member)
Array1=Array(objGroup.member)
wscript.echo VarType(Array1)
Length = UBound(Array1)
wscript.echo Length-
RZomerman
RZomerman's Profile: http://forums.novell.com/member.php?userid=98896
View this thread: http://forums.novell.com/showthread.php?t=426140

Answer 1

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Using vbscript, I have no idea. The attribute name on a group that you
are likely after is 'member' and I can definitely query it in my setup.
Can you see the member attribute logging in with your user when using a
standard LDAP Browser like Apache Directory Studio? If not then perhaps
there is no value for that attribute on those objects, or perhaps you lack
rights. Will vbscript let you directly print out an array? Have you
verified that the array of values has a non-zero length based on your output?
Out of curiosity, any reason you are limiting yourself to vbscript? Does
ADODB work for directories (like eDirectory or other LDAP environments) as
well as databases? Has this worked in the past?
Good luck.
On 11/17/2010 05:06 AM, RZomerman wrote:
>
> Hi all,
>
> I'm trying to retrieve the membership of users from a group using a
> VBScript from a windows machine. I'm able to retrieve all groups in a
> certain OU.. and connect to each of those groups to retrieve the name,
> hoever, when i try to retrieve the objGroup.member attribute, the result
> is an empty array. What is the correct (or working) way of retrieving
> that information.
>
> -Const ADS_SCOPE_SUBTREE = 2
>
> 'eDir
> strSource="eDirectory"
> 'ActiveDir
> strTarget="ActiveDirectory"
>
>
> strNDSUserName="cn=admin,o=eDir"
> strPassword="P@ssw0rd"
>
> Set objConnection = CreateObject("ADODB.Connection")
> Set objCommand = CreateObject("ADODB.Command")
> objConnection.Provider = "ADsDSOObject"
> objConnection.Properties("User ID") = strNDSUserName
> objConnection.Properties("Password") = strPassword
> objConnection.Open "ADSI"
>
> Set objCommand.ActiveConnection = objConnection
>
> objCommand.Properties("Searchscope") = ADS_SCOPE_SUBTREE
> objCommand.CommandText = "SELECT entryDN FROM 'LDAP://" & strSource &
> "/ou=Groups,o=eDir' WHERE structuralObjectClass='groupOfNames'"
> Set objRecordSet = objCommand.Execute
>
> objRecordSet.MoveFirst
> Do Until objRecordSet.EOF
> Wscript.Echo objRecordSet.Fields("entryDN").Value
> strEntryDN=objRecordSet.Fields("entryDN").Value
>
> Set objGroup = GetObject ("LDAP://" & strSource & ":389/" &
> strEntryDN)
> objGroup.getInfo
> Wscript.echo objGroup.Name & " is the Name"
>
> wscript.echo TypeName(objGroup.member)
> Array1=Array(objGroup.member)
> wscript.echo VarType(Array1)
> Length = UBound(Array1)
> wscript.echo Length-
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.15 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iQIcBAEBAgAGBQJM48ocAAoJEF+XTK08PnB5Do4P+QFuA7Yd29 ALk0npbakRoeQA
T8Kq70SRh8Mw2Hmpz2Vq6tOurOF9K0xGUK4G7jkYiqyGJDXHhI rc35dzb0teXu2e
M6EA8bj01HZ7WKAR0pQz5j4qW2OC5NeQIauL/aFQgzsMSqdMNnioZEFtC5fRsMQT
uvTB2pQTtQrUMP3OqO8793RCaFGaqZcw49isCR13cIb+WJjYoH UsOi1Ljp+OPNBD
3oXLOCaRJp/Aljp5XARhFLSV6Fuq1r5QAMW9t/fhlaLHin9M81DZP/wUP0rnQaV7
sich2GLsUzureBuou8gbVeuIYXKrVN2PjRDcM7TTKBONNjlLRd bZNMlUum4os3FD
GLV4wCzpBiAzjfqe4DMoJvP2lZXd1StS2R9kvTFAPXOrNceu2P akhXUFqo4F11Eu
tyI5VWRft3Y+z9lli2wUQ+2CgHvVEl8QROGVLrHN5z23X8TTL+ g+ksz/JjoGJiyj
43lUnJKX+LWlWbxokxtdh5NBEh2N3DTteaFD+nbyDYoxrHmXnR J9zG0t1UdBrImn
8yUhhywbPRL0A8eySYMSf7nu6/Uj9pwXBb2PRvit2Nuaqa8AoPSn4+6CQ5D0dPm6
cWEuMqoR4/gIFnQ+8D3mR2uyVRQL9cwvSPzShLPJ9Xy6IV7pN5a8g0fF2UmI 4biq
oquiXekjXI+wo/dfUBCj
=2TKC
-----END PGP SIGNATURE-----