Question

I have LdapContrib and LdapNgPlugin installed and working properly. My LDAP users successfully login and their loginnames are properly mapped to WikiNames and their UserTopics. The documentation for LdapNgPlugin includes a reference to "filter" in the LDAP syntax, but there are no examples given and no options or other descriptions of how to use the filter parameter.

I am able to use LDAP{} to create a list of all LDAP users. But I want to filter that (list? search?) so that only those users with an email address in their record will be listed. I am able to get the email address from the directory record with either $mail in LDAP{} or $emails in LDAPUSERS{}.

Environment

-- DavidWolfe - 13 May 2008

Answer

If you answer a question - or have a question you asked answered by someone - please remember to edit the page and set the status to answered. The status is in a drop-down list below the edit box.

Really? Nobody knows how filter works?

-- DavidWolfe - 12 Jun 2008

The filter parameter to %LDAP{}% is an LDAP search filter. Have a look at RFC1558 for a full definition. There are a couple of easier tutorials and quick-starters for LDAP search filters on the net as well.

Filtering for an attribute to be present can be done using something like (mail=*).

-- MichaelDaum - 13 Jun 2008

Wow! That worked great Michael. Thank you!

So here is my final LDAP search

%LDAP{"(objectClass=posixAccount)" 
  filter="(mail=*)" 
  base="(cn=users)"
  limit="0" 
  header="| *Name* | *Mail* | *iChat* |$n" 
  format="| $cn | $mail | $apple-imhandle |" 
  footer="$n<br/><font color='red'>$count users</font>" 
  sort="cn"
}%

Which works great and results in this (simulated):

I have another:

%LDAPUSERS{hideunknown="off" header=" | *WikiName* | *username* | *Email* | $n" sep="$n" format=" | $displayName | $loginName | $emails | "}%

That also works great and results in (simulated):

I cannot find a way to get both WikiName AND Instant Message account in the same listing. As far as I can tell, LDAP can retrieve the apple-imhandle field of the records, but LDAPUSERS cannot. And LDAPUSERS can retrieve (or create) the WikiName, but LDAP cannot.

I can call one command from within the format of the other and get the needed information. But when I try that, EVERY record is retrieved into each cell. So, for example

%LDAPUSERS{hideunknown="off" header=" | *WikiName* | *username* | *Email* | *IM* | $n" sep="$n" format=" | $displayName | $loginName | $emails | %LDAP{format="$apple-imhandle"}% | "}%

results in (simulated): That also works great and results in (simulated):

Is there a way to get a single list with:

• WikiName
• Email Address
• Instant Message account

-- DavidWolfe - 13 Jun 2008

Sorry, closing this after more than 30 days of inactivity. Please feel free to re-open if needed.

-- PeterThoeny - 07 Nov 2008