Quantcast
Channel: Software Communities : Popular Discussions - ActiveRoles
Viewing all articles
Browse latest Browse all 1277

Cannot programatically get member list from Dynamic Groups

$
0
0
We're facing some issues in production where the ARS engine intermittently falters while building dynamic groups, and they are written to AD with blank members or a fraction of the members. This is causing a lot of hassle for some of our applications.

While Quest Support is assisting us, I want to write a script that will monitor a handful of critical dynamic groups and alert me when the group members list is empty or has dropped dramatically. I built an MU that explicitly includes these groups. In my script I call to both the Request and DirObj objects so that I can compare member data.

My script, utilizing OnPreModify, calls to the [i]member[/i] attribute and works for regular security groups, however when I modify the dynamic groups members it doesn't run. I filter group objects for only when the member attribute is modified as follows:

[i]If (Not libARSAdminTasks.IsAttributeModified(Request, "member")) Then Exit Sub[/i]

With regular AD security groups it processes without issue and I get the figures I need, but never for the Dynamic Groups. I also tried using the [i]edsaMember[/i] attribute but no luck on that either.

When I look at the Change History of both group types, the Dynamic Group does not show changes for [i]member[/i], just for [i]accountNameHistory[/i] and [i]edsaDGConditionsList[/i]

What attribute, or what method, do I have to use to see the Request and DirObj [i]member[/i] values for this group type?

thanks!

Viewing all articles
Browse latest Browse all 1277

Trending Articles