Re: Enumerating all available objectClass?

What you are trying to do is a little complicated for sure as the AD data
model is a little complicated with the different types of classes and the
inheritance model. As to whether you need to actually use a tree view or
not, that's hard to say.

Agreed, it's still up in the air, and not being terribly familiar with any
of it makes it somewhat difficult for me to make the call.

Can you explain again WHY it is useful to have a list of all objectClass
values to query against? I ask this seriously as I do A LOT of LDAP
programming in my day to day life (having written a book about it and
such) and I can't think of a time when I've needed to do this.

I have an application (not written by me, nor do I have access to the
source) that lets users enter a raw query as separate component substrings
(LDAP prefix, distinguished name, LDAP filter, search scope and property) to
get to a specific AD property. I now need to do more or less the same, only
in a more user-friendly way--eg, so the user isn't required to have much (or
any) knowledge of the underlying ugly details. I figured starting with
classes of objects and then drilling down might be a good place to start,
but as mentioned, it's still all up in the air.

Bottom line--given the 5 fields above, I've now been asked to do the
equivalent with a UI insulating the user from things like LDAP syntax as
much as possible. The original app lets the user enter anything without any
sort of filtering or limiting access to only a subset of what's available.
I need to take the opposite approach--show what's available and let the user
make a selection among what's in his particular environment. Any thought
would be very welcomed.

Getting started with the S.DS.AD schema classes isn't very hard, although
there aren't many examples out there. We didn't cover this very much at
all in our book, sad to say.

Basically, you just want to start by calling
ActiveDirectorySchema.GetCurrentSchema() and then calling FindAllClasses()
to enumerate the classes available. You can then loop through them to get
their names and such. If you want to build a tree, you could do that by
looking at SubClassOf to figure out which class is a given class' parent.

Sounds reasonable.

You might also consider moving this thread over to the
microsoft.public.adsi.general group. This group tends to be more IT
focused than programming focused and these types of questions sometimes
get lost in the shuffle. The other group is lower traffic by an order of
magnitude at least.

Thanks, I'll give it a shot first and follow up in that group if I get
stuck.


.

Relevant Pages

  • Re: Urgent: Restrict LDAP Queries of a domain user
    ... I can only set LDAP read permissions to all the tree? ... Joe Kaplan escreveu: ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)
  • Re: [PHP] user access/roles/privs functionality
    ... up/down in the tree as required. ... If I can find the right process, I'll implement it in my targeted app. ... PHP General Mailing List ... You certainly have a tree since LDAP is a directory although AFAIK it is slower when writing if you compare it with a database but much faster when reading data. ...
    (php.general)
  • generating a tree-like structure
    ... framework that allows building a tree like structure from certain kind ... I have a program that dumps the content of a LDAP ... unordered output that the LDAP server gives me, ... It should be a textual representation of what you see in GUI programs ...
    (comp.lang.python)
  • Re: evolution and LDAP
    ... it doesn't allow writes on the tree, you have to specify rights on ... tree. ... Usually, LDAP ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
    (Debian-User)
Loading