Target specific OU with CFldap

[Pete220652393l9r]

Hey folks,

question about the start parameter in the cfldap command- 

I am trying to work with our developers to automate the onboarding process; we want our intranet site based in CF to read from specific ou to create users in the intranet app

They seem to be having a hard time.

Questions:

1) Is this possible?

2)can someone possibly provide an example if the OU I want is three levels down the tree:

mycompany.com/Offices/Domain Users/New Hires

(note the spaces in the names)

the google say it is possible, but more times than not I see examples of people only using the dc portion of the name (dc-mycompany, dc=.com)

[BKBK]

Could you share the cfldap code you currently have? That will speed up the discussion.

[Pete220652393l9r]

please see the attached image - they only it to the root of the ad - start="dc=mycompany,DC=COM"

the code isn't going to help - they told me they tried - but I myself haven't seen the attempt  to set a specific our

disregard the marrow arrow (that was for something else) 

If I give this as an example is this the correct syntax or can CFLDAP only scan the whole AD.

start="ou=New Hires,ou=Domain Users,ou=offices,dc=mycompany dc=com"

The point is to lock this process down to the  newuser OU  as part of a bigger onboard workflow that involves sweeping out that ou when other actions are performed 

[BKBK]

start="ou=New Hires,ou=Domain Users,ou=offices,dc=mycompany dc=com"

By Pete220652393l9r

There is a problem here with the domain components (DC) section. In LDAP, each domain component must be separated by a comma. The correct format is therefore to use a comma to separate dc=mycompany and dc=com, like this:

start="ou=New Hires,ou=Domain Users,ou=offices,dc=mycompany,dc=com"

[Pete220652393l9r]

tks everyone  - we seem to have gotten the results we were expecting - 

[Charlie Arehart]

Thanks for your update, but what was the solution for you? Knowing that might help future readers finding this discussion. And if it was BKBK's reply that helped, marking that as "the answer" could suffice. 

[Pete220652393l9r]

the developer told me that the syntax was correct - that he was filtering or limiting the results returned.

Before posting, I was looked up the syntax myself and from the Google, it should have been working - but how it goes I act like a court jester and look for answers and it inspires others to do me up