LDAP Add

Introduction

Prerequisites

Before using this valve the LdapClient module must be configured and deployed.

Configuration

Note

Valve name: LDAPAdd

Common LDAP valve configuration can be found here.

Operates on the current item. By default item.id() is used as the LDAP DN. If dn_parameter is set, that value is used instead.

Properties

Name	Description	Default value	Mandatory	Expanded
attributes	List of item properties to include as attributes.	N/A
ignore_empty_values	Ignore empty values in properties. The attribute is not sent to the LDAP client if empty.	false
dn_parameter	If not using item.id() as DN value.	N/A

Example

{
  "name": "LDAPAdd",
  "config": {
    "destination": "default",
    "dn_parameter": "${item.dn}",
    "attributes": ["uid", "mail", "mobile"]
  }
}

Audit

When AuditModule is active and the LdapClient is configured with "create": true, each successful add operation emits an audit event.

Requires "create": true in the LdapClient audit configuration.

Valve config

{
  "name": "LDAPAdd",
  "config": {
    "attributes": ["cn", "sn", "objectClass"]
  }
}

Audit event

{
  "operation": "create",
  "client_type": "ldap",
  "data_source": "default",
  "entity_type": "entry",
  "entity_id": "uid=demo,dc=example,dc=com",
  "principal": { "subject": "[email protected]" },
  "changes": [
    { "name": "objectClass", "action": "add", "value": "inetOrgPerson" },
    { "name": "cn",          "action": "add", "value": "Demo User" },
    { "name": "sn",          "action": "add", "value": "User" }
  ]
}

• entity_id — the DN of the created entry, taken from item.id()
• changes — one entry per attribute listed in attributes