//=============
// Search in paricular AD host for all security groups starting with "vco" and returns list of UserGroup objects
System.log("== ")
System.log("== UserGroups/Security groups ==")
System.log("== ")
userGroups = ActiveDirectory.search("UserGroup", "vco", host)
for ( i in userGroups){
System.log(userGroups[i])
}
//=============
// Search in paricular AD host for all groups (Containers) starting with "vco" and returns list of UserGroup objects
System.log("== ")
System.log("== Groups/Containers ")
System.log("== ")
userGroups = ActiveDirectory.search("Group", "vco", host)
for ( i in userGroups){
System.log(userGroups[i])
}
Starting with AD plugin 3.x there is generic LDAP client that can be used to do arbitrary LDAP query
https://communities.vmware.com/people/igaydajiev/blog/2016/07/18/active-directory-plugin-300-new-and...
Ragarding the syntax of LDAP quieries you can refer to https://technet.microsoft.com/en-us/library/aa996205(v=exchg.65).aspx
//=============
// Use generic LDAP client to perform arbitrary LDAP query against specific host.
// Example : Search for all security groups starting with vco* and retunr them as list of LdapEntries
var ldapClient = host.getLdapClient();
var searchResult = ldapClient.search(host.hostConfiguration.ldapBase /* 'dc=somedomain,dc=com' */
, LdapSearchScope.SUB // Search also in subentries
, LdapDereferencePolicy.ALWAYS
, 0
, 0
, "(&(objectCategory=group)(cn=vco*))" ) //Query string
// Traverse trough result set
entries = searchResult.getSearchEntries()
for (var e in entries)
{
System.log(entries[e].getParsedDN().toNormalizedString());
}
====
To search for particular entry by it's distinguished name you can take a look also at example workflow cumming with AD 3.x plugin "Lookup entry by DN using non-persistent LDAP client"
Hope it helps !
