Forum Discussion

Altostratus

Jan 21, 2021

Is it possible to do a secondary query in VPE?

Currently, the manager attribute is mapped in an AD Query object under required attributes, however, that returns the distinguished name for the user's manager. I have a piece of custom code t...

application delivery

BIG-IP Access Policy Manager (APM)

iRules

KeesvandenBos

MVP

Jan 22, 2021

Hi,

You can perform the AD query as many times as you like. Also with and without custom formatting.

Just add the extra AD query agent in your policy in the correct place.

Cheers,

Kees

Khyler
Altostratus
Jan 22, 2021
ok so say i'm logging in, the original AD query pulls my "manager" attribute, and returns the distinguished name "CN=John Smith,OU=something,OU=something, etc.", how do i then use another AD query as you're saying, to pull John Smiths' samaccountname?
- KeesvandenBos
  MVP
  Jan 23, 2021
  You could do this in the first query. Add the sAMAccountname in the required attributes (see screenshot).
- Khyler
  Altostratus
  Jan 25, 2021
  ok yes but that is requiring to query the sAMAccountname of the person logging in. I need the sAMAccountname of the person that I report to. Unless i'm missing something here?
- KeesvandenBos
  MVP
  Jan 25, 2021
  Hi,
  
  Ok I think I didn't understand your issue, but now I hope I do.
  When you perform an AD query it returns attributes of the user (either the user that is performing the query or what you are using for the search filter)
  
  In what attribute(s) is the name of the manager stored? And can these attributes is some way be re-used to query for the sAMAccountname of the manager?
  
  Cheers,
  
  Kees