0 votes

We were used to bind to group member object using: $member = $Context.BindToObjectByDN("%member%") which worked perfectly, but now it is not. Its because %member% is returning something like: <GUID=3a53f79a-c4e9-444e-9f45-40878ac0e601>

Is it bug or feature? And is it possible to get DN of added/removed member using another variable?

by (570 points)

1 Answer

0 votes
by (233k points)

Hello,

Is it bug or feature?

This behavior is by design. To bind to a member being added/removed from a group, use the following code:

$member = $Context.BindToObject("Adaxes://%member%")

And is it possible to get DN of added/removed member using another variable?

Unfortunately, there is no such possibility using value references.

0

I disagree that %member% always returned GUID instead of DN. We have used %member% on several places and treat it like it returns DN and everyhing was working fine until we updated Adaxes to version 2020.1 (sorry for wrong version in title of this question).

On screenshots bellow you can see comparison of one powershell business rule script, that is used to check new members of AD group. You can clearly see, that when run in Adaxes console (2019.2 or 2020.1), %member% returns DN: adaxes_2019.2_returns_DN.PNG adaxes_2020.1_returns_DN.PNG

But when this rules is invoked in adaxes web, it returns GUID: web_test.PNG

So to sum this up. Adaxes console is working correctly and returns DN, but in new version of web interface something changed, so it returns GUID now.

For me, this is clearly a bug..

+1

Hello,

Sorry for the confusion, but we did not mean that the value reference always resolves into a distinguished name or GUID. It is by design that the value reference can resolve differently in different cases (it can also resolve into the SID) and that is why it is recommended to use the approach we specified in our previous post to bind to members being added/removed from groups.

0

OK thanks

Related questions

0 votes
1 answer

Can you point me to documentation to upgrade from Adaxes 2019.2 ver 3.1.2.174230 to the current version please?

asked Jun 16, 2020 by msylvester (60 points)
0 votes
1 answer

Hello, I'm wondering if there is something like the calculated property "%adm-RandomString%", but that also includes symbols. Is there another command that accomplishes this task, or ... 's characters? Any way I could get this done within the realm of Adaxes?

asked Jul 7 by NKB#2772 (50 points)
0 votes
1 answer

Hi Support, I'm trying to use adaxes to send a couple of branded emails with User information such as UPN and First name. I've written some HTML email code but would ... &lt;table class="wrapper" width="100%" cellspacing="0" align=center cellpadding="0"&gt;

asked Feb 18, 2020 by richarddewis (260 points)
0 votes
1 answer

I have 18 domains managed by Adaxes and have noticed that Admin (full access) t all objects acts normally, but for piecemeal scopes like Service Desk that scopes to individual ... role (including 16 denies) and expect it to grow as we add more domains.

asked Sep 20 by DA-symplr (40 points)
0 votes
1 answer

I have Search configured for one of our web interfaces. One of the fields that can be searched is a custom attribute admCustomAttributeText4 (with a friendly name of ... are definitely some accounts with that attribute populated. Is this behaving as designed?

asked Sep 19, 2018 by sandramnc (820 points)
2,887 questions
2,606 answers
6,774 comments
121,367 users