Getting User Group From Active Directory

Hi ,

In my situation one ipl file is getting triggred during workflow process.In IPL i want the name of all the group to which this user(I am getting the user name from a parameter) belongs to.
Hoe can i do this in perl file.I have done this thing in java but not very much familier with perl.It would be a great help if somebody gets me the code to do this.
These are things which are available to me in IPl file
User Name
Active Directory IP Address.

I hope I am not confusing any one of you .

-Pranav

Find more posts tagged with

Comments

stefanmaier

Hi Pranav,
have a look on the perl module Win32API::Net,
there're two functions which are interesting for you:
Win32API::Net::UserGetInfo()
Win32API::Net::UserGetGroups()

Regards
Stefan

Migrateduser

You can also do it with the Net::LDAP module.

I believe I posted some sample code for this about 9 months ago in the perl forum. Search for it - if you don't find it, I can look and see if I still have the code.

pranav

Hi Rob,
I started searching for that specific post of yours which is having the code, But it seems almost impossible for me to search as your posts are infinte in number.It would be great help for me if you cane get me the specific code.I know i am asking too much.

NOTE : Stefan thanks for your help too but again i don't have much familiarity with perl so method names as such are not going to help me much.Once again thanks to you to show me the new methods which can be used.

-Pranav

Adam Stoller

Try searching again -- search ALL FORUMS for the phrase "Net::LDAP" -- you'll get about 14 hits - of which only 3 [currently] come from Rob - one of those being the post in this thread suggesting you search for the other ones.

--fish
Senior Consultant, Quotient Inc.
http://www.quotient-inc.com

pranav

Hi,
I tried this code for a specif user to retrieve all the groups to which this user belongs(memberOf).

my $str_user = "pranav.thakur" ;
my $attrs = "memberOf";
my $filter = "(sAMAccountName=$str_user)";
#my $results = $ad->search(base=>$ldap_base_dn,filter=>$filter,attrs=>$attrs);
#my $count = $results->count;
print LOG "====== $str_user \n";
my $results = $ldap->search(base=>$ldap_base_dn,filter=>$filter,attrs=>$attrs);
my $count = $results->count;
print LOG "Number of Groups are $count \n";

my $count = $results->count;
my $entry;
my $directory;

for (my $i=0; $i<$count; $i++) {

$entry = $results->entry($i);
my $grp_var = $entry->get_value('memberOf');
print LOG "Group Value is ---> $grp_var \n ";

}

I am getting the result too but it is just the name of one group.Actually the user belongs to around 10 groups but i am getting a single group.
Actually i am getting the value of $count= 1 .is should have been more than 1 in my case.
Second ::::
I am getting the group as CN=testgroup,OU=try,DC=test,DC=com . Can't it be possible to get simply the group name as "testgroup" rather than getting the whole path.Because i have to string comparision with this group name.
I hope to get a quick reply.
thanks in advance.

-Pranav Thakur

stefanmaier

Hi Pranav,
some months ago I did some testing with LDAP-things.
Perhaps this code snippet helps you...


...
my $href = $result->as_struct;

# get an array of the DN names
my @arrayOfDNs  = sort keys %$href;        # use DN hashes

# process each DN using it as a key
foreach ( @arrayOfDNs ) {
   print $_, "\n";
   my $valref = $$href{$_};
   my %h=$valref;

   # get an array of the attribute names
   # passed for this one DN.
   my @arrayOfAttrs = sort keys %$valref; #use Attr hashes

   my $attrName;        
   foreach $attrName (@arrayOfAttrs) {

     # skip any binary data&colon; yuck!
     next if ( $attrName =~ /;binary$/ );

     # get the attribute value (pointer) using the
     # attribute name as the hash
     my $attrVal =  @$valref{$attrName};
     print "\t $attrName: @$attrVal \n";


   }
   # End of that DN
}

Regards
Stefan