Forum Discussion
jamie_staples
Cirrus
CirrusAPM Access Policy - Pass LDAP or AD Query variable
Is it possible to query whether a user has a value for one or another variable then use that to pass or fail passage down the rest of the swimlane for access? (e.g.- expr {[mcget {session.ad.session....
Lucas_Thompson
Employee
EmployeeIf you get a log that the variable is not found, then the AD Query agent must not have created it. The LDAP Search performed by AD Query includes a default attribute filter that you can adjust or remove. By default only these "Required Attributes" are returned by the search:
So if you need additional attributes than these, you can add them.
jamie_staplesCirrus
CirrusIf the additional attributes ARE among the required attributes, and I am still getting the variable is not found, what do I do?
If I have removed some of the "required attributes", does that break something? Do I always have to use the specific required attributes AND any additional attributes?
