0 votes

We were used to bind to group member object using: $member = $Context.BindToObjectByDN("%member%") which worked perfectly, but now it is not. Its because %member% is returning something like: <GUID=3a53f79a-c4e9-444e-9f45-40878ac0e601>

Is it bug or feature? And is it possible to get DN of added/removed member using another variable?

by (3.1k points)

1 Answer

0 votes
by (189k points)

Hello,

Is it bug or feature?

This behavior is by design. To bind to a member being added/removed from a group, use the following code:

$member = $Context.BindToObject("Adaxes://%member%")

And is it possible to get DN of added/removed member using another variable?

Unfortunately, there is no such possibility using value references.

0

I disagree that %member% always returned GUID instead of DN. We have used %member% on several places and treat it like it returns DN and everyhing was working fine until we updated Adaxes to version 2020.1 (sorry for wrong version in title of this question).

On screenshots bellow you can see comparison of one powershell business rule script, that is used to check new members of AD group. You can clearly see, that when run in Adaxes console (2019.2 or 2020.1), %member% returns DN: adaxes_2019.2_returns_DN.PNG adaxes_2020.1_returns_DN.PNG

But when this rules is invoked in adaxes web, it returns GUID: web_test.PNG

So to sum this up. Adaxes console is working correctly and returns DN, but in new version of web interface something changed, so it returns GUID now.

For me, this is clearly a bug..

+1

Hello,

Sorry for the confusion, but we did not mean that the value reference always resolves into a distinguished name or GUID. It is by design that the value reference can resolve differently in different cases (it can also resolve into the SID) and that is why it is recommended to use the approach we specified in our previous post to bind to members being added/removed from groups.

0

OK thanks

Related questions

0 votes
1 answer

Hi Support, I'm trying to use adaxes to send a couple of branded emails with User information such as UPN and First name. I've written some HTML email code but would ... &lt;table class="wrapper" width="100%" cellspacing="0" align=center cellpadding="0"&gt;

asked Feb 18 by richarddewis (1.5k points)
0 votes
1 answer

Can you point me to documentation to upgrade from Adaxes 2019.2 ver 3.1.2.174230 to the current version please?

asked Jun 16 by msylvester (650 points)
0 votes
1 answer

I have Search configured for one of our web interfaces. One of the fields that can be searched is a custom attribute admCustomAttributeText4 (with a friendly name of ... are definitely some accounts with that attribute populated. Is this behaving as designed?

asked Sep 19, 2018 by sandramnc (3.4k points)
0 votes
1 answer

Hi, is there a way through the Adaxes SDK to check all users against a specific group and determine wether or not they are part of it (must include direct and indirect ... Forrest root domain which holds the group, members of the group can be in every domain

asked Jun 30, 2014 by ijacob (6.1k points)
0 votes
1 answer

We are using the SeeAlso attribute to store who is responsible for specific accounts. We do not wish to use the Manager field, because the Manager/Direct Report structure is ... to, for example, extende the expiration date of an account. Is that possible?

asked Jan 28 by manuel.galli (510 points)
2,352 questions
2,106 answers
5,746 comments
127,328 users