Modifying multivalue AD entries via LDAP

[ssteve]

I would like to modify the Distribution Group membership for users and contacts
within my domain via an LDAP enabled CF user form. I am able to modify single
value entries using:

<cfldap action="modify"
server="#LDAP_Server#"
modifytype="replace"
attributes = "mail=ddd@xx.com"
dn="CN=Grant-Admin-News_,CN=Users,dc=orsa-ldap, dc=orsa, dc=uoregon, dc=edu"
username="#LDAP_User#"
password="xxxxxxxx">
but if I change the attributes to member and try to execute the following, it
gives error msg:

<cfldap action="modify"
server="#LDAP_Server#"
modifytype="replace"
attributes = "member=CN=third_\,
user,cn=Users,DC=orsa-ldap,DC=orsa,DC=uoregon,DC=edu"
dn="CN=Grant-Admin-News_,CN=Users,dc=orsa-ldap, dc=orsa, dc=uoregon, dc=edu"
username="#LDAP_User#"
password="xxxxxxxxxxx">

The error msg is: An error has occured while trying to execute modify
:CN=Grant-Admin-News_,CN=Users,dc=orsa-ldap, dc=orsa, dc=uoregon, dc=edu:
[LDAP: error code 34 - 00000057: LdapErr: DSID-0C090A85, comment: Error in
attribute conversion operation, data 0, One or more of the required attributes
may be missing/incorrect or you do not have permissions to execute this
operation on the server.

If I execute the following: <cfldap action="modify"
server="#LDAP_Server#"
modifytype="replace"
attributes = "member="
dn="CN=Grant-Admin-News_,CN=Users,dc=orsa-ldap, dc=orsa, dc=uoregon, dc=edu"
username="#LDAP_User#"
password="xxxxxxxxxxx">

It erases all data from the membership list, so I know it's not read only
field.

I believe the problem is how I'm formatting the attributes statement, but I
can't find any examples to work from.

any ideas?

thanx,

steve shapiro
univesity of oregon

[ssteve]

Never mind, I found the solution: adding a separator tag, so the final cfldap
statement looks like:
<cfldap action="modify"
server="#LDAP_Server#"
modifytype="delete" (or add, replace)
separator="|"
attributes = "member=CN=user\,
user,CN=Users,DC=orsa-ldap,DC=orsa,DC=uoregon,DC=edu"
dn="CN=Grant-Admin-News_,CN=Users,dc=orsa-ldap, dc=orsa, dc=uoregon, dc=edu"
username="#LDAP_User#"
password="xxxxxxxxxx">