0 votes

Hi,

We are in process of implementing the User Creation/Deletion & Add/Remove Users to Group.
We have been using the Canonical name for referencing the ADGroup/OU Unit and Users with the Distinguished name.

Question:
we want to use ObjectGuid instead of the Distinguished name, I wonder about the possibility?

In this below example, we aim to use GUID/UPN over the Distinguished name in Manager attribute.

for example:
<ProcessRequest xmlns="http://softerra.com/adaxes/spmlwebservice">
<requestElement >
<addRequest returnData="everything" targetID="all domains" xmlns="urn:oasis:names:tc:SPML:2:0">
<containerID ID="{ObjectGuid}" />
<data >
<attr name="cn" xmlns="urn:oasis:names:tc:DSML:2:0:core">
<value >TESTFN17 TESTLN17</value>
</attr>
<attr name="givenName" xmlns="urn:oasis:names:tc:DSML:2:0:core">
<value >TESTFN17</value>
</attr>
<attr name="sn" xmlns="urn:oasis:names:tc:DSML:2:0:core">
<value >TESTLN17</value>
</attr>
<attr name="manager" xmlns="urn:oasis:names:tc:DSML:2:0:core">
<value >CN=PRDTESTFN9 PRDTESTLN9,OU=Users,OU=Company,DC=Company,DC=net</value>
</attr>
<attr name="objectclass" xmlns="urn:oasis:names:tc:DSML:2:0:core">
<value >user</value>
</attr>
</data>
</addRequest>
</requestElement >
</ProcessRequest>

Currently, i'm getting below error response when i use UPN in Manager Name Reference attribute.

<ProcessRequestResponse xmlns="http://softerra.com/adaxes/spmlwebservice">
<ProcessRequestResult>
<addResponse status="failure" error="customError" xmlns="urn:oasis:names:tc:SPML:2:0">
<errorMessage>The name reference is invalid. (Server: company.net)</errorMessage>
</addResponse>
</ProcessRequestResult>
</ProcessRequestResponse>

Thanks,
Aravindh

by (100 points)

1 Answer

0 votes
by (223k points)
selected by
Best answer

Hello Aravindh,

Yes, it is possible to use the manager GUID instead of the distinguished name. The GUID should be specified in the following format:
<attr name="manager" xmlns="urn:oasis:names:tc:DSML:2:0:core">
<value>&lt;GUID=855ED5AB-960A-47EF-941E-B3D4AE2E8163&gt;</value>
</attr>

0

Thanks for the response!.
however, we only have the email id/UPN and when i tried, it throws me
...
<attr name="manager" xmlns="urn:oasis:names:tc:DSML:2:0:core">
<value ><UPN=PRDTESTFN19.PRDTESTLN19@company.net></value>
</attr>
...

Response:
<ProcessRequestResponse xmlns="http://softerra.com/adaxes/spmlwebservice">
<ProcessRequestResult>
<addResponse status="failure" error="customError" xmlns="urn:oasis:names:tc:SPML:2:0">
<errorMessage>The parameter is incorrect. (Server: company.net)</errorMessage>
</addResponse>
</ProcessRequestResult>
</ProcessRequestResponse>

Thanks

0

Hello Aravindh,

There is no possibility to use the UPN property in this manner, only the GUID or SID of the desired manager.

Related questions

0 votes
1 answer

Hello, I don't find an attribute for the netbios name of managed Domains like adm-DomainDN? How can I add the NetBios name to a report like "All users"? regards Helmut

asked Mar 5, 2021 by a423385 (510 points)
0 votes
1 answer

We are looking at Adaxes as a way to update user's passwords offline and updating the computer's cached password. Currently, a majority of our computers are off the network ... via the Internet. Is this a viable option? What issues are we not considering?

asked Sep 18, 2020 by bmajors (20 points)
0 votes
1 answer

Hi, is it possible to show the DisplayName instead of the Name in the personal header? In our new AD structure cn should match everything else, like Alias, email prefix ... when they see a CN like in the screenshot. Regards and thanks in advance Ingemar Jacob

asked Sep 19, 2013 by ijacob (960 points)
0 votes
1 answer

In the web interface, I would like to display the "Distinguished Name" property but it is not showing it as it would when using ADUC or even in the Adaxes Admin Console. Is ... I would like it to display like this: CN=Mark Smith,OU=Sales,DC=Fabrikam,DC=COM

asked Jan 15, 2020 by mark.it.admin (1.8k points)
0 votes
1 answer

Hello We need to allow distribution group managers to grant send as permissions for individual members of each group. Is there a way to reference the group name when running a user custom command from a Modify Group web interface item? Many Thanks

asked Aug 19, 2021 by VCal (20 points)
2,762 questions
2,496 answers
6,540 comments
1,488,529 users