User Guide

Table Of Contents
Updating an LDAP directory 527
In this query, the ou attribute value consists of two values in a comma-delimited list. One is the
department name. The other is People. This is because the Airius database uses the
ou attribute
type twice:
In the distinguished names, at the second level of the directory tree, where it differentiates
between organizational units such as people, groups, and directory servers
As the department identifier in each persons entry
Because the attribute values are returned in order from the person entry to the directory tree root,
the
ListFirst function extracts the persons department name.
Updating an LDAP directory
The cfldap tag lets you do the following to LDAP directory entries:
Add
Delete
Add attributes
Delete attributes
Replace attributes
Change the DN (rename the entry)
These actions let you manage LDAP directory contents remotely.
The following sections show how to build a ColdFusion page that lets you manage an LDAP
directory:
Adding a directory entry” on page 528
“Deleting a directory entry” on page 533
“Updating a directory entry” on page 535
The form displays directory entries in a table and includes a button that lets you populate the
form fields based on the unique user ID.
The example ColdFusion page does not add or delete entry attributes or change the DN. The
sections Adding and deleting attributes of a directory entry” on page 537 and “Changing a
directory entrys DN” on page 538 describe these operations.
To keep the code short, this example has limitations that are not appropriate in a production
application. In particular, it has the following limitations:
If you enter an invalid user ID and click either the Update or the Delete button, ColdFusion
generates a “No such object” error, because there is no directory entry to update or delete. Your
application should verify that the ID exists in the directory before it tries to change or delete its
entry.
If you enter a valid user ID in an empty form and click Update, the application deletes all the
attributes for the User. The application should ensure that all required attribute fields contain
valid entries before updating the directory.