Check if Number of group (attribute: gidNumber) is unique

Question

We want to check, if the number of a new team (group) is unique. The number is stored in the attribute "gidNumber". I have a business rule executing before creating group. The following script is executed, but it doesn't check the number. Am i missing something?

Import-Module Adaxes

if ($Context.IsPropertyModified("gidNumber"))
{
    # Get the value
    $value = $Context.GetModifiedPropertyValue("gidNumber")

    # Validate the value
    if (([System.String]::IsNullOrEmpty($value)) -or (-not($value.Contains("-"))))
    {
        $Context.Cancel("Ungültige Team-Nummer!")
        return
    }

    # Check whether the value is unique
    if ((Get-AdmGroup -Filter 'gidNumber -eq $value') -ne $NULL)
    {
        $Context.Cancel("Ein Team mit dieser Team-Nummer existiert bereits!")
        return
    }
}

Comments

Hello,

The script looks just fine. For us to help you with a solution, please, specify the following:

• Where exactly is the script executed? Is it a Business Rule triggering Before updating a group or Before creating a group? Could you, please, post here or send us (support[at]adaxes.com) a screenshot?
• What exactly do you mean by it doesn't check the number?
• Do you face any error messages? If so, please, post here or send us (support[at]adaxes.com) screenshots.
• Is gidNumber the LDAP name of the property or its display name?

---

The script is in a custom command. I have a business rule triggering before creating a group, which executes the custom command, with scope on all objects

Every team has a number set in the attribute gidNumber

This number has to be unique, no other team should have the same number.

In case a new team (group) is created, the gidNumber of all existing teams must be checked. If the gidNumber of the new team already exists on another team, there should be an error.

Now, the business rule triggers, the script is executed and gives me no error. I can create a team with an existing gidNumber, without an error.

Answer 1

Hello,

To achieve the desired behavior, you need to move the script into the Business Rule triggering Before creating a group. It will never work in a Custom Command. Also, you need to remove the check for dashes being present in the property value as it is an integer property and it cannot have dashes. Find the updated script below.

Import-Module Adaxes

if ($Context.IsPropertyModified("gidNumber"))
{
    # Get the value
    $value = $Context.GetModifiedPropertyValue("gidNumber")

    # Validate the value
    if ([System.String]::IsNullOrEmpty($value))
    {
        $Context.Cancel("Ungültige Team-Nummer!")
        return
    }

    # Check whether the value is unique
    if ((Get-AdmGroup -Filter 'gidNumber -eq $value') -ne $NULL)
    {
        $Context.Cancel("Ein Team mit dieser Team-Nummer existiert bereits!")
        return
    }
}