Creating custom user attributes in Active Directory using JNDI

Question

I am attempting to create a custom attribute that can be assigned to an existing Active Directory user in my domain. I am not fully aware of how to achieve this. It is my understanding that once the attribute has been created, I can assign it to the user via:

mods[0] = new ModificationItem(DirContext.ADD_ATTRIBUTE, new BasicAttribute("attributeName", "attributeValue"))
ctx.modifyAttributes(userDN, mods)

Any information is appreciated.

JPBlanc · Accepted Answer · 2011-06-03 15:13:38Z

1

Not sure what you want to do.

But Active-Directory is a Directory, so it use a SCHEMA to define which attributes can be used in an object. This means that you can modify (add, delete, replace) the value of an attribut that exists (in the SCHEMA) for a given class, but can'nt add a custom attribut to a class without modifying the SCHEMA.

answered Jun 3, 2011 at 15:13

JPBlanc

73.1k17 gold badges137 silver badges180 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

Thomas Over a year ago

After a little more research, I see what you mean. I believe this is what I need to do Attribute may = new BasicAttribute("MAY", attributeName); Attributes attributes = new BasicAttributes(true); attributes.put(may); DirContext schema = ctx.getSchema(""); // Modify schema object schema.modifyAttributes("ClassDefinition/myObjectClassName",DirContext.ADD_ATTRIBUTE, attributes);

JPBlanc Over a year ago

BE CAREFUL, modifying the SCHEMA is quite non Reversible. Most of the time SCHEMA modification are writen in LDIF and tested on virtual machine, before being inserted one time for all in the AD. see the following article

Thomas Over a year ago

I will be sure to test the schema before using it in the live AD forest. Thanks!

JPBlanc Over a year ago

Do you know, that you've got a MMC to modify the SCHEMA in a graphical maner. Then you Export your SCHEMA in Ldif file with LDIFDE.EXE then you import it with the same tool on the final server.

Collectives™ on Stack Overflow

Creating custom user attributes in Active Directory using JNDI

1 Answer 1

4 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

4 Comments

Your Answer

Sign up or log in

Post as a guest

Related