asked on

How do i produce a group im a member of in Active Directory using VB/ASP

Hi All, i think im pretty close but i cant seem to get the syntax right or something. Below is the code for my ASP page. What happens is that when a user runs it, it will grab the userName, first and lastname, email, etc. If the user is part of 5 different groups, and i want only GroupA and GroupB to post, i need to specify that somehow in my code but unfortunately what i have below is as far as i have got. I have attached my full ASP code and have attached an image of the current output i get. What i did was put in the syntax "primarygroupID" just to test, its not what i need.

Any help would be much appreciated, or if I need to clarify something let me know.

Thank you in advance!

<%Option Explicit%>
<%
'On Error Resume Next
	'variables declared
	dim formAction, logoutUrl, errorUrl, securityKey
	dim email, firstName, lastName, userName, groups
	Dim sDNSDomain, sFilter, sQuery, sDN
	Dim oConnection, oCommand, oRS, oUser
	Dim activeDirectoryUser, activeDirectoryPassword
	Dim ldapIp
	Dim Group1, Group2, Group3, Group4, Group5

	'''''''''''''''''' FILL THESE OUT ''''''''''''''''''''''
	formAction = "http://sus1.rapidtraining.com/lms/sso/"
	logoutUrl = "http://susaspweb/sso/originalasp.asp"
	errorUrl = "http://susaspweb/sso/matt.aspx?error={0}"
  	securityKey = "A701D3BAE6EE964245BE7794B6814DFD063036B4BED7028B"	
	activeDirectoryUser = "SUSINC\training"     'should be format domain\username (example: microsoft\bgates)
	activeDirectoryPassword = "****"
	ldapIp = "172.20.2.5:389"    'the IP address and port of your LDAP server
	sDNSDomain = "DC=susinc,DC=ad" 'example: DC=microsoft,DC=com
	'''''''''''''''''' END FILL THESE OUT ''''''''''''''''''''''

	'acquire user information
	userName=Request("AUTH_USER")


	'set the ldap query string for ado
	Set oConnection = CreateObject("ADODB.Connection")
	Set oCommand = CreateObject("ADODB.Command")
	oConnection.Provider = "ADsDSOOBject"

	'The user to run the LDAP query as.  Doesn't need any special privileges
  	oConnection.Properties("User ID") = activeDirectoryUser
  	oConnection.Properties("password")= activeDirectoryPassword
	oConnection.Open "Active Directory Provider"
	Set oCommand.ActiveConnection = oConnection

  	if InStr(1,userName, "\") then
	  userName = Mid(userName, InStr(1,userName, "\")+1)
  	end if

	sFilter = "(&(objectCategory=person)(objectClass=user)(sAMAccountName=" & userName & ")(memberOf=CN=WhatsupGold,OU=Users,OU=Information Technology,OU=Support Services,DC=susinc,DC=ad));primarygroupID,givenName,sn,mail,distinguishedName;subtree" 	
	
	sQuery = "<LDAP://" & ldapIp & "/" & sDNSDomain & ">;" & sFilter & ";DistinguishedName;subtree"
	
	oCommand.CommandText = sQuery
	oCommand.Properties("Timeout") = 30
	
	Set oRS = oCommand.Execute

	if not oRS.EOF then
	  email = oRS.Fields("mail")
	  firstName = oRS.Fields("givenName")
	  lastName = oRS.Fields("sn")
	  Group1 = oRS.Fields("primarygroupID")
	  Set oUser = nothing
	end if
	 
	oRS.Close
	Set oRS=Nothing
	oConnection.Close
	Set oCommand = Nothing
	Set oConnection = Nothing
%>
</SCRIPT>
<html>
<head>
  <META http-equiv="Content-Type" content="text/html;charset=UTF-8"> 
  <title><%Request.ServerVariables("SERVER_NAME") %></title>
  <style type="text/css">
  <!--
    TD {
      color: #000000;
      background-color: #FFFFFF;
      font-family: Verdana, Arial;
      font-size: 12px;
    }
    HR {
      height: 1px;
      color: #A52A25;
    }
    .row {
      font-size: 10px;
    }
    .header {
      color: #555555;
      background-color: #F4F4F4;
      border:1px solid #555555;
    }
    .alert {9:47 AM 11/15/2005
      padding:20px;
      color: #000000;
      font-family: Verdana, Arial;
      font-size: 10px;
      font-weight: bold;
    }
    .formbutton {
      color: #000000;
      background-color: #F4F4F4;
      font-family: Verdana, Arial;
      font-size: 10px;
      text-transform: uppercase;
      width: 120px;
      height: 24px;
    }
  -->
  </style>
</head>
<body>

<table>
  <tr>
    <td style="padding-bottom:10px">
      <font size="4" color="#A52A25">Single Sign-on Test</font>
    <td>
  </tr>
  <% if not IsEmpty(Request.QueryString("error")) then %>
    <tr>
      <td>
        Response from the server:<br><br>
        <span class="alert">
          <%= Request.QueryString("error") %>
        </span>
      </td>
    </tr>
    <tr>
      <td style="padding-top:10px;padding-bottom:20px">
        <span class="alert">
          <input class="formbutton" type="button" value="okay"
            onclick="location.href='sso.asp'">
        </span>
      </td>
    </tr>
  <% end if %>
  <tr>
    <td>
      The following form parameters will be POSTED to the server:
    </td>
  </tr>
</table>

<table border="0" cellpadding="5" cellspacing="2"
  style="border:1px solid #A52A25;margin:20px">

  <!-- FORM BEGINS HERE -->
  <form action="<%= formAction %>" method="post">

  <!-- TABLE HEADER -->
  <tr>
    <td width="200" class="row header">
      request parameter
    </td>
    <td width="120" class="row header">
      form value
    </td>
    <td class="row header">
      req. (y/n)
    </td>
  </tr>
  <!-- USER ID -->
  <tr>
    <td class="row">
      user.id
    </td>
    <td class="row">
      <%= userName %>
    </td>
    <td align="center" class="row">
      y
    </td>
  </tr>
  <!-- FIRST NAME -->
  <tr>
    <td class="row">
      user.first.name
    </td>
    <td class="row">
      <%= firstName %>
    </td>
    <td align="center" class="row">
      y
    </td>
  </tr>
  <!-- LAST NAME -->
  <tr>
    <td class="row">
      user.last.name
    </td>
    <td class="row">
      <%= lastName %>
    </td>
    <td align="center" class="row">
      y
    </td>
  </tr>
  <!-- EMAIL -->
  <tr>
    <td class="row">
      user.email
    </td>
    <td class="row">
      <%= email %>
    </td>
    <td align="center" class="row">
      n
    </td>
  </tr>
  <!-- GROUPS -->
  <tr>
  	<td class="row">
    	user.group.name
    </td>
    <td class="row">
    <%= Group1 %>
    </td>
    <td align="center" class="row">
    n
    </td>
   </tr>
  <!-- DIVIDER -->
  <tr>
    <td colspan="3" style="padding:0px">
      <hr>
    </td>
  </tr>
  <!-- SECURITY KEY -->
  <tr>
    <td class="row">
      security.key
    </td>
    <td class="row">
      <%= securityKey %>
    </td>
    <td align="center" class="row">
      y
    </td>
  </tr>
  <!-- ERROR URL -->
  <tr>
    <td class="row">
      security.error.url
    </td>
    <td class="row">
      <%= errorUrl %>
    </td>
    <td align="center" class="row">
      n
    </td>
  </tr>
  <!-- LOGOUT URL -->
  <tr>
    <td class="row" style="padding-bottom:15px">
      security.logout.url
    </td>
    <td class="row" style="padding-bottom:15px">
      <%= logoutUrl %>
    </td>
    <td align="center" class="row" style="padding-bottom:15px">
      n
    </td>
  </tr>
  <tr>
    <td colspan="3" align="right">
      <input class="formbutton" type="submit" value="login">
    </td>
  </tr>

  <% if not IsEmpty(email) Then %>
    <input name="user.email" type="hidden" value="<%= email %>">
  <% end if %>
  <input name="security.key" type="hidden" value="<%= securityKey %>">
  <input name="security.error.url" type="hidden" value="<%= errorUrl %>">
  <input name="security.logout.url" type="hidden" value="<%= logoutUrl %>">
  <input name="user.id" type="hidden" value="<%= userName %>">
  <input name="user.first.name" type="hidden" value="<%= firstName %>">
  <% if not IsEmpty(lastName) Then %>
    <input name="user.last.name" type="hidden" value="<%= lastName %>">
  <% end if %>
  </form>
  <!-- FORM ENDS HERE -->
</table>

</body>
</html>