<ldap/>

Provided by module: Tags: LDAP tags

Executes a LDAP operation, but doesn't do anything with the result.The <ldap> tag is mostly used for LDAP operation that change the contents of the directory, for example add or modify.

Add (adds an object):

<ldap server="ldap://ldap.foo.com/" op="add" binddn="cn=admin,dc=foo,dc=com" dn="cn=user,dc=foo,dc=edu" attr="(cn:'user')(sn:'surname')(objectClass:'req'd objectClass')" password="<password>" />

Delete (deletes an object):

<ldap server="ldap://ldap.foo.com/" op="delete" binddn="cn=admin,dc=foo,dc=com" dn="cn=user,dc=foo,dc=com" password="<password>" />

Replace (replaces a value of an attribute):

<ldap server="ldap://ldap.foo.com/" op="replace" binddn="cn=admin,dc=foo,dc=com" dn="cn=user,dc=foo,dc=com" attr="(sn:'new value')" password="<password>" />

Modify (adds a second value to an existing attribute):

<ldap server="ldap://ldap.foo.com/" op="modify" binddn="cn=admin,dc=foo,dc=com" dn="cn=user,dc=foo,dc=com" attr="(sn:'additional value')" password="<password>" />

Attributes

server="LDAP URL" (Server URL)

Connection LDAP URL. If omitted the Default server URL will be used.

URLs are written on the format: ldap://hostname[:port]/base_DN[?[attribute_list][?[scope][?[filter][?extensions]]]]. For details, see RFC 2255.

binddn="distinguished name"

Bind DN used for authentication in the directory server.

password="password"

Password for authentication in the directory server. If omitted the empty string will be used.

dn="distinguished name"

Distinguished name of object.

op="add,delete,modify,replace"

The actual LDAP operation.

Note that op='modify' will change only the attributes given by the attr attribute.

attr="attribute_name1:[(attribute_value1[,... ])][,attribute_name2,...]"

The actual values of attributes, for example:

(sn:'Zappa'),(mail:'hello@nowhere.org','athell@pandemonium.com')

parser

If specified, the content of attr will be parsed by the RXML parser. This is useful if the operation is to be built dynamically.