Active Directory icon

Active Directory

Query an LDAP server using ldapjs with NLP support

Overview

This node performs operations on an LDAP server, specifically supporting querying, creating users, and moving objects within the directory. The 'Move Object' operation allows relocating an LDAP object from one Organizational Unit (OU) to another, optionally renaming it. This is useful for managing directory structures, such as reorganizing users or resources within an Active Directory environment.

Use Case Examples

  1. Moving a user object from one department OU to another in Active Directory.
  2. Renaming and moving a computer object to a different OU for organizational purposes.

Properties

Name Meaning
Object Distinguished Name (DN) The full Distinguished Name of the LDAP object to move. Supports expressions for dynamic input.
Target Organizational Unit (OU) The destination OU where the object will be moved. Must be a valid OU DN.
New Relative Distinguished Name (Optional) Optional new name for the object. If left empty, the current name is preserved.
Disable Certificate Validation If enabled, disables SSL/TLS certificate verification (not recommended for production environments).

Output

JSON

  • results - Array containing the result of the move operation, typically the updated object DN or confirmation.

Dependencies

  • Requires LDAP server credentials including URL, bind DN, and password.
  • Optionally requires OpenAI API credentials for natural language query mode (not applicable for move operation).

Troubleshooting

  • LDAP Authentication Failed (Error 80090308): Indicates invalid credentials or authentication method. Verify bind DN format, password, account status, permissions, and domain controller accessibility.
  • LDAP Authentication Failed (Data 52e): Invalid credentials, possibly due to incorrect username/password, disabled or locked account, or expired password.
  • LDAP Connection Failed: Cannot reach LDAP server. Check server URL, port accessibility, network connectivity, firewall, and DNS resolution.
  • LDAP Operation Timeout: Operation took too long. Consider increasing timeout, refining search filters, reducing page size, or checking network latency.

Discussion