User Guide

Table Of Contents
520 Chapter 23: Managing LDAP Directories
When you add, modify, or delete a directory entry, you must treat the entry’s object class as a
possibly multivalued attribute. For example, when you add a new entry, you specify the object
class in the
cfldap tag attributes attribute. To retrieve an entrys object class names, specify
objectclass” in the list of query attributes. To retrieve entries that provide a specific type of
information, you can use the object class name in the
cfldap tag filter attribute.
Attribute type
A schemas attribute type specification defines the following properties:
The attribute type name
A unique object ID that identifies the attribute type
(Optional) An indication of whether the type is single-valued or multivalued (the default is
multivalued)
The attribute syntax and matching rules (such as case sensitivity)
The attribute type definition can also determine limits on the range or size of values that the type
represents, or provide an application-specific usage indicator. For standard attributes, a registered
numeric ID specifies the syntax and matching rule information. For more information on
attribute syntaxes, see ETF RFC 2252 at http://www.ietf.org/rfc/rfc2252.txt.
Operational attributes, such as creatorsName or modifyTimeStamp, are managed by the directory
service and cannot be changed by user applications.
Using LDAP with ColdFusion
The cfldap tag extends the ColdFusion query capabilities to LDAP network directory services.
The
cfldap tag lets you use LDAP in many ways, such as the following:
Create Internet White Pages so users can locate people and resources and get information
about them.
Provide a front end to manage and update directory entries.
Build applications that incorporate data from directory queries in their processes.
Integrate applications with existing organizational or corporate directory services.
The
cfldap tag action attribute supports the following operations on LDAP directories:
Action Description
query Returns attribute values from a directory.
add Adds an entry to a directory.
modify Adds, deletes, or changes the value of an attribute in a directory entry.
delete Deletes an entry from a directory.
modifyDN Renames a directory entry (changes its distinguished name).