CODEWITHSUNDEEP
coldfusionactive-directoryldap
eterps
eterps

Reputation: 14208

Is it possible to use CFLDAP to retrieve all the users from a distribution group with only the group email address?

I'd like to use CFLDAP to retrieve all the users in a certain distribution group used by Exchange. If this is possible, what do I use for the 'filter' attribute of CFLDAP? Also, if all I have is the email address for the group (e.g. '[email protected]'), can I still get the user information, or do I need the name of the group that uses that email address?

For example, what would I put in the block below?

<cfldap server = "foo.example.com"
        action = "query"
        name = "ldap2"
        start = "dc=foo,dc=example,dc=com"
        attributes = "givenName,sn,sAMAccountName,mail,employeeID,dn"
        filter="?????????????"
        username="BAR\eterps"
        password="12345" >

Upvotes: 5

Views: 5065

Answers (3)

eterps
eterps

Reputation: 14208

To get the Group name from the email address, I used Active Directory Explorer. I'm sure there is a way to query for it as well.

Once I had the group name, I created my filter for CFLDAP: (&(objectClass=user)(memberOf=cn=Sales,ou=Email Distribution Groups,dc=foo,dc=example,dc=com))

So the resulting CFLDAP query looks like:

<cfldap server = "foo.example.com"
    action = "query"
    name = "ldap2"
    start = "dc=foo,dc=example,dc=com"
    attributes = "givenName,sn,sAMAccountName,mail,employeeID,dn"
    filter="(&(objectClass=user)(memberOf=cn=Sales,ou=Email Distribution Groups,dc=foo,dc=example,dc=com))"
    username="BAR\eterps"
    password="12345" >

Upvotes: 3

abbottmw
abbottmw

Reputation: 754

If I understand your question correctly, you can modify the start attribute with the specific Group dn, and not just the Root dn, it should only return the info from that group. If there is an attribute that points to users that are members of that group, make sure you include that in the attribute list.

If you dont modify the start attribute, your filter would be something like (cn=groupname) that points to the group you want.

Upvotes: 0

Matt Busche
Matt Busche

Reputation: 14333

a filter is not required when using cfldap in my experience. What happens when you run the query without a filter?

Upvotes: 0

Related Questions