453
DEVELOPING
COLDFUSION 9 APPLICATIONS
Accessing and Using Data
Las
t
upda
te
d 8/5/2010
If an entry belongs to a class that derives from another class, the entry’s objectclass attribute lists the lowest-level class
and all the superior classes from which the lowest-level class derives.
When you add, modify, or delete a directory entry, you must treat the entry’s object class as a possibly multivalued
attribute. For example, when you add a new entry, you specify the object class in the cfldap tag
attributes
attribute.
To retrieve an entry’s object class names, specify “objectclass” in the list of query attributes. To retrieve entries that
provide a specific type of information, you can use the object class name in the
cfldap
tag
filter
attribute.
Attribute type
The attribute type specification of a schema defines the following properties:
•
The attribute type name
•
A unique object ID that identifies the attribute type
•
(Optional) An indication of whether the type is single-valued or multivalued (the default is multivalued)
•
The attribute syntax and matching rules (such as case sensitivity)
The attribute type definition can also determine limits on the range or size of values that the type represents, or provide
an application-specific usage indicator. For standard attributes, a registered numeric ID specifies the syntax and
matching rule information. For more information on attribute syntaxes, see ETF RFC 2252 at
http://www.ietf.org/rfc/rfc2252.txt
.
Operational attributes
, such as creatorsName or modifyTimeStamp, are managed by the directory service and cannot
be changed by user applications.
Using LDAP with ColdFusion
The cfldap tag extends the ColdFusion query capabilities to LDAP network directory services. The
cfldap
tag lets you
use LDAP in many ways, such as the following:
•
Create Internet White Pages so users can locate people and resources and get information about them.
•
Provide a front end to manage and update directory entries.
•
Build applications that incorporate data from directory queries in their processes.
•
Integrate applications with existing organizational or corporate directory services.
The
cfldap
tag
action
attribute supports the following operations on LDAP directories:
The following table lists the attributes that are required and optional for each action. For more information on each
attribute, see the cfldap tag in the
CFML Reference
.
Action
Description
query
Returns attribute values from a directory.
add
Adds an entry to a directory.
delete
Deletes an entry from a directory.
modify
Adds, deletes, or changes the value of an attribute in a directory entry.
modifyDN
Renames a directory entry (changes its distinguished name).