We are reading the activedirectory for later use within section access.
Our applications are also published using dynamic distribution (loop field in document) in QV Publisher where you distribute using a field in the application.
What is the best approach for this ?
I am using the field SAMAccountname currently, but I have noticed that there is also the SID.
Is there a way to read out the SID from the LDAP server and store them in QVD format for later us in your applications ?
Script currently reads out LDAP :
LET arg=chr(01); // Set search start name to a very low value
DO
UserTable:
LOAD
UserDN as key_user,
*
;
LOAD
name as UserName,
distinguishedName as UserDN,
sAMAccountName as [USERID],
objectsid as SID,
'$(vDC1)'&'$(vDC2)'&'\'&sAMAccountName as QVSamaccount
;
SQL select
name, distinguishedName,sAMAccountName, objectsid // Fields to select
FROM 'LDAP://$(vRootDse)' WHERE objectCategory='person'
AND name>'$(arg)'; // Get rows where "name" is GT the arg
EXIT DO WHEN ScriptError > 1 // Stop loop if SELECT has error
EXIT DO WHEN NoOfRows('nameTable') = 0; // Stop loop if SELECT returns nothing
EXIT DO WHEN peek('UserName') = '$(arg)'; // If the last "name" read is EQ to arg -- no more entries
LET arg=peek('UserName'); // Set the arg to the last "name" read
LOOP
There is some VB scripting in the application as well (you can download the original QV application from the community), but my question is the objectsid in the script above. On the LDAP server it is not stored in the readable S-9-9-99-9999999-9999-999... format. Is there a way to do this.
As you can see, the LDAP info is not read from a prebuilt TXT or CSV but directly from the LDAP server so tools like powershell, etc are not at my fingertips.
