Ruby net/ldap

Ruby
1

I need to move some user objects from one OU to another. Is there a way
to
do this with net/ldap? This is basically done by renaming the DN, so
the CN
stays the same but the rest of whatever changes. Can anyone show me an
example of doing this with net/ldap?

2

I also need to do the same thing like adding new groups and assigning
users
to existing groups using ruby-net-ldap. However, the library doesn’t
seem to support it.
If we delete the old cn and create a new one, the unicodePwd and other
attributes might
not be able to be replicated to the new entry.

I’m thinking of using the ActiveLDAP because it is capable of managing
the user Groups.
But I want to support a dynamic connection to secondary AD servers.
I’m not sure if it can be
supported in ActiveLDAP.

3

On Sun, Apr 27, 2008 at 12:00 PM, Dave S. [email protected] wrote:

I need to move some user objects from one OU to another. Is there a way
to
do this with net/ldap? This is basically done by renaming the DN, so the
CN
stays the same but the rest of whatever changes. Can anyone show me an
example of doing this with net/ldap?

I was wanting to do the same thing recently. However it looks like all
you
can do directly is change the cn (the dn is untouchable directly). You
could always read the data into memory, delete the origional entry, and
create a new one with the original data.

–
“Hey brother Christian with your high and mighty errand, Your actions
speak
so loud, I can’t hear a word you’re saying.”

-Greg Graffin (Bad Religion)

4

Hi,

In [email protected]
“Re: ruby net/ldap” on Mon, 12 May 2008 17:10:12 +0900,
rvd5star [email protected] wrote:

But I want to support a dynamic connection to secondary AD servers.
I’m not sure if it can be
supported in ActiveLDAP.

I think it can be supported.

Thanks,

5

Hi,

Thank you for your reply.
By the way, can ActiveLdap work on ActiveDirectory server?

Thanks,

6

On Mon, May 12, 2008 at 8:10 AM, rvd5star [email protected] wrote:

Thanks,

kou

Assigning users to existing groups is not a problem at all with
ruby-net-ldap. I do that now. You just need to understand Active
Directory. You need to add them to the member attribute.

–
“Hey brother Christian with your high and mighty errand, Your actions
speak
so loud, I can’t hear a word you’re saying.”

-Greg Graffin (Bad Religion)

7

Hello Glen,

Could you show me a code snippet on how to assign a member to an
existing group?
Since ActiveLdap is quite slower than ruby-net-ldap, I was thinking of
using
both libraries. I’ll use ruby-net-ldap for managing users and
activeldap for managing
groups.

What do you think? Any advice?

Thanks.

8

One more thing, when I try to establish connection to
our AD server using the Base.establish_connection(), I get
an “nil”. Does it mean that the connection fails?

I also want to connect thru SSL. Is there anything that
I need to consider?

9

Hi,

2008/5/13 rvd5star [email protected]:

One more thing, when I try to establish connection to
our AD server using the Base.establish_connection(), I get
an “nil”. Does it mean that the connection fails?

No.

I also want to connect thru SSL. Is there anything that
I need to consider?

establish_connection(:method => :ssl) # or :tls

Thanks,

10

On Mon, May 12, 2008 at 8:38 PM, Kouhei S. [email protected] wrote:

I need to consider?

establish_connection(:method => :ssl) # or :tls

Thanks,

kou

for course in self.courses
ldap.add_attribute(“cn=#{course.full_title},” +
@@lab_env[lab][:group_container_path], :member, “cn=#{self.user_name},”
+
@@lab_env[lab][:user_container_path])
end

I will translate here:

ldap.add_attribute(“full group dn”, :member, “full user dn”)

–
“Hey brother Christian with your high and mighty errand, Your actions
speak
so loud, I can’t hear a word you’re saying.”

-Greg Graffin (Bad Religion)

11

Hi,

2008/5/13 Glen H. [email protected]:

for course in self.courses
ldap.add_attribute(“cn=#{course.full_title},” +
@@lab_env[lab][:group_container_path], :member, “cn=#{self.user_name},” +
@@lab_env[lab][:user_container_path])
end

I will translate here:

ldap.add_attribute(“full group dn”, :member, “full user dn”)

In ActiveLdap:
courses.each do |course|
course.members << user
end

Thanks,