It looks that these methods work indeed. They throw an exception if I call them with a wildcard '*' as an argument. But if I use a specific name, or part of name + wildcard, then the objects are returned. (What would be the correct syntax for returning all users or all groups then?).
However, I still have problems with that functionality. In my vCO script I need to find LDAP groups to which a specific user belongs. So after receiving a LdapUser object, I try to find LdapGroups by reading its 'groups'/'allGroups' property. And these properties return an empty array even if the user is a member of one or more groups.
I also can't find members of LdapGroup by using 'subGroups' or 'users' property - the list is also empty. More than that - If I take a LdapUser, and LdapGroup objects and call 'isMemberOfGroup' method on LdapUser object, providing LdapGroup as an argument, then method returns 'false', while the user is a member of that group.
The code looks like this:
var admiral, navy;
var users = Server.searchLdapUsers('Admiral');
if (users.length > 0) {
System.debug('Number of users: ' + users.length); // Shows "Number of users: 1"
admiral = users[0];
var userGroups = admiral.groups;
System.debug('Number of groups for Admiral: ' + userGroups.length); // Shows "Number of groups for Admiral: 0"
}
var groups = Server.searchLdapGroups('Navy');
if (groups.length > 0) {
System.debug('Number of groups: ' + groups.length); // Shows "Number of groups: 1"
navy = groups[0];
var groupUsers = navy.users;
System.debug('Number of users in Navy: ' + groupUsers.length); // Shows "Number of users in Navy: 0"
}
System.debug('Admiral is in Navy: ' + admiral.isMemberOfGroup(navy)); // Shows "Admiral is in Navy: false"
The only exception with LdapUser is 'currentLdapUser'. If LdapUser object represents currentLdapUser, then its 'groups'/'allGroups' return the list of LdapGroups as it should be.
Could you try this to check if it is working properly in your environment?
Thank you.
Looks like a bug, or non-implemented functionality.