LDAP Search Active Directory in Transformer Step

[reneschoepf]

Hello everyone,

I would like to do an LDAP search in the Active Directory in a Transformer Step using Java Script. Unfortunately I can't find the solution.

We receive an XML file in which the user name, i.e. SamAccountName, is present. I have to use this to get the first and last name of the user. The search string is clear to me, but I am generally unable to query the AD. Can't the Mirth server do this by default?

Thanks for the help

[rjkroll]

As far as I know, MIRTH cannot query AD directly, but you may be able to do it via a transformer step with Java. Maybe something like this:

/ Import necessary Java classes
importPackage(javax.naming);
importPackage(javax.naming.directory);

// Set up the environment for creating the initial context
var env = new java.util.Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, "ldap://your.ad.server:389");
env.put(Context.SECURITY_AUTHENTICATION, "simple");
env.put(Context.SECURITY_PRINCIPAL, "your_bind_dn");
env.put(Context.SECURITY_CREDENTIALS, "your_password");

try {
    // Create the initial context
    var ctx = new InitialDirContext(env);

    // Specify the search base and filter
    var searchBase = "DC=your,DC=domain,DC=com";
    var searchFilter = "(sAMAccountName=" + samAccountName + ")";

    // Perform the search
    var searchControls = new SearchControls();
    searchControls.setSearchScope(SearchControls.SUBTREE_SCOPE);
    var results = ctx.search(searchBase, searchFilter, searchControls);

    // Process the results
    if (results.hasMore()) {
        var result = results.next();
        var firstName = result.getAttributes().get("givenName").get();
        var lastName = result.getAttributes().get("sn").get();
        // Use firstName and lastName as needed
    }

    // Close the context when finished
    ctx.close();
} catch (e) {
    logger.error("LDAP Error: " + e);
}

[pacmano1]

It hope it would be on port 636. Might be LDAP over startTLS, LDAPS. Also bind type may matter (simple vs GSSAPI)

[reneschoepf]

Thank you very much for your help. I have successfully realized it with LDAPS.

The certificate of the certification authority simply has to be imported into the KeyStore