cannot get DN passed to script

Question

trying to leverage thsi script in a custom command, bu ti cannot get the parameter to pass to it.

https://www.adaxes.com/script-repository/copy-group-membership-from-specified-user-s590.htm

Comments

Hello Derek,

Sorry for the confusion, but we are not sure what exactly the issue is. Could you, please, specify which of the two scripts you are using and what exactly is not working as desired? If you face any errors, please, post here or send us (support@adaxes.com) screenshots.

---

The script :

$sourceUserDNParamName = "param-User" # TODO: modify me
$replaceGroups = $True # TODO: modify me

# Bind to the source user
$sourceUserDN = $Context.GetParameterValue($sourceUserDNParamName)
$sourceUser = $Context.BindToObjectByDN($sourceUserDN)

# Get groups to add
$groupGuidsToAdd = New-Object "System.Collections.Generic.HashSet[System.Guid]"
$sourceUser.GetEx("adm-DirectMemberOfGuid") | %%{[void]$groupGuidsToAdd.Add([Guid]$_)}

# Get current groups
$currentGroupGuids = New-Object "System.Collections.Generic.HashSet[System.Guid]"
$Context.TargetObject.GetEx("adm-DirectMemberOfGuid") | %%{[void]$currentGroupGuids.Add([Guid]$_)}

# Update groups
foreach ($guidBytes in $groupGuidsToAdd)
{
    $guid = [Guid]$guidBytes
    if ($currentGroupGuids.Remove($guid))
    {
        continue
    }

    $group = $Context.BindToObjectEx("Adaxes://<GUID=$guid>", $True)
    $group.Add($Context.TargetObject.AdsPath)
}

if ($replaceGroups)
{
    # Get the primary group ID
    $primaryGroupId = $Context.TargetObject.Get("primaryGroupID")

    foreach ($guidBytes in $currentGroupGuids)
    {
        $guid = [Guid]$guidBytes
        $group = $Context.BindToObjectEx("Adaxes://<GUID=$guid>", $True)

        # Skip the group if it is the user's Primary Group
        if ($group.Get("primaryGroupToken") -eq $primaryGroupId)
        {
            continue
        }

        $group.Remove($Context.TargetObject.AdsPath)
    }
}

Variable:

The Form:

The Error:

Create User Copy Groups2: 1 operation executed Run PowerShell script 'Copy Groups' for the user Exception calling "BindToObjectByDN" with "1" argument(s): "'adm-InitiatorDN' is unavailable." Stack trace: at , : line 6 You cannot call a method on a null-valued expression. Stack trace: at , : line 10

---

Hello Derek,

Thank you for the provided details. As we can see, the custom command has just a single parameter, while the form actually has at least two entry fields. Additionally, the error references using adm-InitiatorDN while it is not present in the script. Please, provide us with all the possible details regarding the workflow you have configured (Web interface actions, custom commands, business rules, etc.). If you made changes to the script from the repository, please, post the updated script here or send us (support@adaxes.com) in TXT format.

Answer 1

Hello Derek,

Thank you for the information you sent. It looks like you explicitly entered InitiatorDN as custom command parameter value for executing it in a business rule triggering After creating a user. If you need to copy group membership from the operation initiator, you need to enter %adm-InitiatorDN%. Alternatively, you can reference one of the created user properties containing the user to copy membership from (e.g. their manager). In this case, you need to specify a value reference for the property as template for the parameter value. Finally, the action should look like the following:

Comments

how do i see the template tab?

---

Hello Derek,

To reach the Template tab for configuring parameter values for the Execute a custom command action:

1. Launch Adaxes Administration console.
2. In the Console Tree, expand your service node.
3. Navigate to and select the business rule containing the action.
4. In the Result Pane on the right, right-click the action and then click Edit Action in the context menu.
5. Click Parameters.
6. Click the … button embedded into the parameter field.
7. In the dialog that opens, activate the Template tab.

---

Thanks, i got the template.