The folowing JavaScript code demonstrates the following:
- creates an user inside a group.
- Demonstrates how passing complex objects as parameters can be avoided (via finding it on vCO server). It takes only strings as input and you can use such approch if you find passing objects inappropriate for some reason.
- Shows how vCO API can be called.
You need to place the whole script inside a single script block. The folowing String input should be passed in:
- parentGroup
- username
- password
Note: The AD requires you to use a secure connection (LDAPS) in order to create users. If you do not have LDAP over SSL (LDAPS) you will get an error code coming from the Microsoft's ActiveDirectory server (probably LDAP: error code 53 - 00002035: LdapErr: DSID-0C090AFC, comment: Operation not allowed through GC port, data 0, vece).
var rootDomain = "DC=o11n,DC=vmware";
var parent = getGroupFrom(rootDomain, parentGroup);
var createUserInGroupWithPassWf = findWorkflowByName("Create a user with a password in a group", "Library");
createUserInGroup(parent, username, password);
function getGroupFrom(domain, groupName){
var groups = ActiveDirectory.searchRecursively("Group", groupName);
for(var i in groups){
if(groups[i].distinguishedName.indexOf(groupName + "," + domain) > 0){
return groups[i];
}
}
throw "Group not found in domain: " + domain;
}
function findWorkflowByName(wfName, wfCategory){
var category = Server.getWorkflowCategoryWithPath(wfCategory);
for (wf in category.allWorkflows){
var wf = category.allWorkflows[wf]
if(wfName.equals(wf.name)){
System.log("Workflow found. Id->" + wf.id);
return wf;
}
}
}
function createUserInGroup(parent, name, password) {
System.log("Create user in group: " + parent);
var outParam = "newUser";
var p = new Properties();
p.put("accountName", name);
p.put("password", password);
p.put("confirmPassword", password);
p.put("domainName", null);
p.put("changePasswordAtNextLogon", "false");
p.put("displayName", name);
p.put("groupContainer", parent);
user = executeWf(createUserInGroupWithPassWf, p, "completed").getOutputParameters().get(outParam);
}
function executeWf(wf, p, state) {
var token = wf.execute(p);
waitForState(token, state);
return Server.findForType("WorkflowToken", token.id);
}
function waitForState(token, expState) {
if (token.state != expState) {
var cnt = 0;
while (token.state != expState && ++cnt < 120) {
System.sleep(500);
}
assert.that(token.state, eq(expState));
}
return token;
}
