User Guide

218 Chapter 2: ColdFusion Tags
Usage
If you use the query action, cfldap creates a query object, allowing access to information in the
query variables, as follows:
If you use the
security="CFSSL_BASIC" option, ColdFusion determines whether to trust the
sever by comparing the server’s certificate with the information in the jre/lib/security/cacerts
keystore of the JRE used by ColdFusion MX. The ColdFusion MX default cacerts file contains
information about many certificate granting authorities. If you must update the file with
additional information, you can use the keytool utility in the ColdFusion jre/bin directory to
import certificates that are in X.509 format. For example, enter the following:
keytool -import -keystore cacerts -alias ldap -file ldap.crt -keypass bl19mq
Then restart ColdFusion MX. The keytool utility initial keypass password is "change it". For
more information on using the keytool utility, see the Sun JDK documentation
Characters that are illegal in ColdFusion can be used in LDAP attribute names. As a result, the
cfldap tag could create columns in the query result set whose names contain illegal characters
and are, therefore, inaccessible in CFML. In ColdFusion, illegal characters are automatically
mapped to the underscore character; therefore, column names in the query result set might not
exactly match the names of the LDAP attributes.
For usage examples, see Developing ColdFusion MX Applications.
Example
<h3>cfldap Example</h3>
separator Optional , [comma] Delimiter to separate attribute values of multi-value
attributes. Used by
query, add, and modify actions,
and by
cfldap to output multi-value attributes.
For example, if $ (dollar sign), the
attributes
attribute could be
"objectclass = top$person",
where the first value of objectclass is
top, and the
second value is
person. This avoids confusion if
values include commas.
delimiter Optional ; [semicolon] Separator between attribute name-value pairs. Use
this attribute if:
• the
attributes attribute specifies more than one
item, or
• an attribute contains the default delimiter
(semicolon). For example:
mgrpmsgrejecttext;lang-en
Used by query, add, and modify actions, and by
cfldap to output multi-value attributes.
For example, if $ (dollar sign), you could specify
"cn = Double Tree Inn$street = 1111 Elm; Suite
100
where the semicolon is part of the street value.
Variable name Description
queryname.recordCount Number of records returned by query
queryname.currentRow Current row of query that
cfoutput is processing
queryname.columnList Column names in query
Attribute Req/Opt Default Description