Error while auto-populating fields with Active Directory data

[pankajc80]

HI All,

I have created a Service Dialog with Dynamic Text Box to auto fill with LDAP username, email and Department when a user access self- service portal to request for VM provisioning (Authentication is via Active Directory).
Snippet of the code to pull data from LDAP:
$evm.log(:info, "get_username started")
user = $evm.object['user'].get_ldap_attribute.cn

As per the documentation, get_ladap_attribute(name) is the preferred way, tried with multiple options as below and different error each time:
get_ldap_attribute(cn)
NameError: undefined local variable or method `cn' for main:Object

user = $evm.root['user'].get_ldap_attribute.cn
ArgumentError: wrong number of arguments (given 0, expected 1)

user = $evm.root['user'].get_ldap_attribute:cn --->> This option is working when used with Cloudforms
Net::LDAP::Error:

Can someone please suggest what am I missing or doing incorrectly?

Thanks in anticipation.

[pankajc80]

HI All,

I have created a Service Dialog with Dynamic Text Box to auto fill with LDAP username, email and Department when a user access self- service portal to request for VM provisioning (Authentication is via Active Directory). Snippet of the code to pull data from LDAP: $evm.log(:info, "get_username started") user = $evm.object['user'].get_ldap_attribute.cn

As per the documentation, get_ladap_attribute(name) is the preferred way, tried with multiple options as below and different error each time: get_ldap_attribute(cn) NameError: undefined local variable or method `cn' for main:Object

user = $evm.root['user'].get_ldap_attribute.cn ArgumentError: wrong number of arguments (given 0, expected 1)

user = $evm.root['user'].get_ldap_attribute:cn --->> This option is working when used with Cloudforms Net::LDAP::Error:

Can someone please suggest what am I missing or doing incorrectly?

Thanks in anticipation.
===================================================================================
Hi, Appreciate any feedback on this issue, this has become a blocker at the moment? Has anyone faced similar issue so far?
Thanks!!

[Fryguy]

Hi @pankajc80, get_ldap_attribute depends on an old tool called MiqLdap which was a home-grown LDAP solution that we deprecated a long time ago in favor of an Apache based solution through SSSD. As such, that method is also deprecated and will be removed in an upcoming version. It was actually supposed to be removed many releases ago but was missed, and so it's not part of our testing cycles.

There is more information about MiqLdap and SSSD in this conversion blog post: https://www.manageiq.org/blog/2017/09/miqldap-to-sssd/

If you still need to connect to LDAP from your automation code, you can copy the old MiqLdap code into your automate module or use the Net::LDAP ruby library in your automate code directly.

[pankajc80]

HI @Fryguy, Sorry for coming late on this. Just to highlight my setup, I have integrated ManageIQ Najdorf-1.3 with Microsoft Active Directory using the procedure in: https://www.manageiq.org/docs/reference/latest/auth/active_directory.html

So my query was not to extract data from openLDAP however from AD so if get_ldap_attribute is deprecated, which method is available to fetch the details from AD?

Appreciate any help in this regard.
Thanks!!

[kbrock]

get_ldap_attribute(cn)
NameError: undefined local variable or method `cn' for main:Object

In a ruby sense, the error says that you referenced a variable cn that does not exist.
I'm guessing you would want to pass "cn" or "CN"

But also see jason's comment about that library no longer being supported.
And also see that he said that since it is MIT license, you can totally copy and use it in the future (unsupported) or use the standard ruby Ldap library.