Automate LDAP Integration Tasks from PowerShell

The CData ADO.NET Provider for LDAP is a standard ADO.NET Provider that make it easy to accomplish data cleansing, normalization, backup, and other integration tasks by enabling real-time and bidirectional access to LDAP.

ADO.NET Provider

The ADO.NET Provider provides a SQL interface for LDAP; this tutorial shows how to use the Provider to create, retrieve, update, and delete LDAP objects.

Once you have acquired the necessary connection properties, accessing LDAP objects in PowerShell can be enabled in three steps.

To establish a connection, the following properties under the Authentication section must be provided:

• Valid User and Password credentials (e.g., Domain\BobF or cn=Bob F,ou=Employees,dc=Domain).
• Server information, including the IP or host name of the Server, as well as the Port.

• BaseDN: This will limit the scope of LDAP searches to the height of the distinguished name provided.

  Note: Specifying a narrow BaseDN may greatly increase performance; for example, cn=users,dc=domain will only return results contained within cn=users and its children.

1. Load the provider's assembly:

   
   [Reflection.Assembly]::LoadFile("C:\Program Files\CData\CData ADO.NET Provider for LDAP\lib\System.Data.CData.LDAP.dll")
       

2. Connect to LDAP:

    
   $conn= New-Object System.Data.CData.LDAP.LDAPConnection("User=Domain\BobF;Password=bob123456;Server=10.0.1.1;Port=389;")
   $conn.Open()
   

3. Instantiate the LDAPDataAdapter, execute an SQL query, and output the results:

   
   $sql="SELECT Id, LogonCount from User"
   
   $da= New-Object System.Data.CData.LDAP.LDAPDataAdapter($sql, $conn)
   $dt= New-Object System.Data.DataTable
   $da.Fill($dt)
   
   $dt.Rows | foreach {
   	Write-Host $_.id $_.logoncount
   }
     

Update LDAP Objects

$cmd =  New-Object System.Data.CData.LDAP.LDAPCommand("UPDATE User SET CN='Administrator' WHERE Id = @myId", $conn)
$cmd.Parameters.Add((New-Object System.Data.CData.LDAP.LDAPParameter("@myId","10456255-0015501366")))
$cmd.ExecuteNonQuery()

Insert LDAP Objects

$cmd =  New-Object System.Data.CData.LDAP.LDAPCommand("INSERT INTO User (CN) VALUES (@myCN)", $conn)
$cmd.Parameters.Add((New-Object System.Data.CData.LDAP.LDAPParameter("@myCN","Administrator")))
$cmd.ExecuteNonQuery()

Delete LDAP Objects

$cmd =  New-Object System.Data.CData.LDAP.LDAPCommand("DELETE FROM User WHERE Id=@myId", $conn)
$cmd.Parameters.Add((New-Object System.Data.CData.LDAP.LDAPParameter("@myId","001d000000YBRseAAH")))
$cmd.ExecuteNonQuery()