ADQuery - Microsoft Active Directory

Replies to This Discussion

Permalink Reply by Martin Wasznicky on October 3, 2018 at 12:36pm

you can do it. its documented:

https://www.neuronesb.com/article/neuron-esb-active-directory-conne...

• ▶ Reply

Permalink Reply by Jeffery Hellnick on October 3, 2018 at 1:20pm

I do not see where it states how to specify attributes to return for an AD Query for NeuronESB using the Microsoft Active Directory Adapter.

Can you point to a part of the document that specifies this?

Thank you.

• ▶ Reply

Permalink Reply by Martin Wasznicky on October 4, 2018 at 5:54am

properties node

• ▶ Reply

Permalink Reply by Jeffery Hellnick on October 4, 2018 at 6:37am

Thanks again.  I think we are talking different things.  The "Properties" node specifically indicates it is only for Adding or Editing values (attributes) in AD.

"

• Properties: Contains entries for each attribute that is used to define a new entity or update an existing entity.

"

If it is used for defining which attributes to return for a AD Query, you might consider updating the document or help system to reflect that.

What is the syntax (for NeuronESB) for requesting/specifying the attributes to return from the AD Query?  I'm not asking how to read the "Properties" from the AD response message.

I'm asking how do I submit the AD Query to only return the specified AD attributes in a request.  It is returning hundreds of attributes and I only want a few returned.

• ▶ Reply

Permalink Reply by Jeffery Hellnick on October 4, 2018 at 3:14pm

What is the -syntax- for the Query Mode to retrieve a specific property(ies)?

Do I put (in json)

"Properties":{ "userprincipalname":"" }

• ▶ Reply

Permalink Reply by Jeffery Hellnick on October 25, 2018 at 10:33am

Unfortunately, through extensive testing, it appears this is not possible in NeuronESB.

We can close this post.

• To recap, there is no way to query AD and request specific attributes to be returned to NeuronESB.
• In Query mode, it appears that NeuronESB receives all of the AD attributes, including the thumbnail image, of a user in active directory.

If someone can show how this is possible, that would be great.

Here is where I halted my exploration:

{
    "ActiveDirectory": 
    {
        "Request":
        {
          "LdapPath": " CN=Marty Wasznicky, CN=Users,DC=AD,DC=Server,DC=com",
          "TransactionType": "Get",
          "MaxObjectsToReturn": "1",
          "Properties":
          {
              "userprincipalname": ""
          }
        }
    }
}

• ▶ Reply