MACROMEDIA ColdFusion MX, Develop Manual

Page: 488 / 860

488 Chapter 23: Managing LDAP Directories
This search shows the use of a logical AND statement in a filter. It returns one attribute, the
surname, that is used only for sorting the results.
In this query, the
ou
attribute value consists of two values in a comma-delimited list. One is the
department name. The other is People. This is because the Airius database uses the ou attribute
type twice:
•
In the distinguished names, at the second level of the directory tree, where it differentiates
between organizational units such as people, groups, and directory servers
•
As the department identifier in each person’s entry
Because the attribute values are returned in order from the person entry to the directory tree root,
the
ListFirst
function extracts the person’s department name.
Updating an LDAP directory
The
cfldap
tag lets you do the following to LDAP directory entries:
•
Add
•
Delete
•
Add attributes
•
Delete attributes
•
Replace attributes
•
Change the DN (rename the entry)
These actions let you manage LDAP directory contents remotely.
The following sections show how to build a ColdFusion page that lets you manage an LDAP
directory:
•
“Adding a directory entry” on page 489
•
“Deleting a directory entry” on page 493
•
“Updating a directory entry” on page 495
The form displays directory entries in a table and includes a button that lets you populate the
form fields based on the unique user ID.
The example ColdFusion page does not add or delete entry attributes or change the DN. The
sections
“Adding and deleting attributes of a directory entry” on page 496 and “Changing a
directory entry’s DN” on page 497 describe these operations.
To keep the code short, this example has limitations that are not appropriate in a production
application. In particular, it has the following limitations:
•
If you enter an invalid user ID and click either the Update or the Delete button, ColdFusion
generates a “No such object” error, because there is no directory entry to update or delete. Your
application should verify that the ID exists in the directory before it tries to change or delete its
entry.
•
If you enter a valid user ID in an empty form and click Update, the application deletes all the
attributes for the User. The application should ensure that all required attribute fields contain
valid entries before updating the directory.