Checking whether user is part of a group (follow-up)

[shark2k]

Hi @stevebauman (or whoever can answer).

This is a follow-up to #490 (which did help me).

In that answer @stevebauman gave this as one possible solution:

use LdapRecord\Models\ActiveDirectory\User;

$user = User::find('cn=John Doe,ou=Users,dc=local,dc=com');

if ($user->groups()->whereContains('cn', 'Accounting')->exists()) {
    // The user is apart of the "Accounting" group.
} else {
    // The user is *not* apart of the "Accounting" group.
}

I did not implement that solution and ended up using a different one (that is not really all that efficient but works).
Anyway, I recently tried to implement the above using the following code as a test:

$employeeInfo = User::on('connection2')->where('samaccountname', '=', 'mine')->get()->first();
if ($employeeInfo->groups()->where('cn', 'contains', 'dog')->exists()) {
      echo "Contains dog";
} else {
      echo 'Does not contain dog';
}

I specifically used "dog" to check because I am not a member of any group that contains the word "dog" in the CN, so I expect this code to fail.
However, when I run the code it displays "Contains dog" which is not correct.

If I were to loop through all the groups I am a member of and do a stripos($groupName, 'dog') in an if/else statement, that would give me the result I expected. This is currently what I do, but again it is not efficient and if I can get the above code to work, it should speed up execution of my code by a decent amount.

Thanks for any direction anyone can give me on what I am doing wrong/missing.

-Shark2k

[stevebauman]

Hi @shark2k,

What happens if you run:

$groups = $employeeInfo->groups()->where('cn', 'contains', 'dog')->get();

dd($groups);

What are the results?

[stevebauman]

Do the resulting models contain "dog" anywhere in their CN attribute?

[shark2k]

I searched for the word "dog" on the page and there were no results.

If you are OK with it, I can email you the result from your request tomorrow.
I can put the title of this question as the subject.
I would prefer not to put the results publicly and also feel that obfuscating it would make it pointless to post since you would not get to see the whole thing.

Let me know and/or if you have anything else you want me to try.

Thanks,
-Shark2k

[stevebauman]

Ok thanks for checking. Can you dump the query being executed and post it here?

$query = $employeeInfo->groups()->where('cn', 'contains', 'dog')->getQuery()->getUnescapedQuery();

var_dump($query);

[shark2k]

Sure thing.
Here is the result:

string(10) "(cn=*dog*)"

Let me know if there is anything else I can provide to help with troubleshooting.

Thanks,
-Shark2k

[shark2k]

Hi @stevebauman,

I am not sure if you are trying to look into this to figure out what is going on or if you are just not sure and do not have anything else to add (which I am OK with and completely understand).

After my last reply I started looking through the documentation again and saw/remembered the setConnection method.
I ended up doing a test where I made the initial call for the users using connection2 and then I switched to connection1 and checked to see if the 'cn' contains the value. As I mentioned in my first reply to you, using connection1 to do the check worked, so this method of changing the connection to connection1 and then checking also worked.

I then did further validation doing a test with the actual initial call to get all the users I want and then within the loop to go through the user collection, I am setting the connection to connection1 and then checking for the existence of various groups with if/else statements. Doing it this way, versus my original way of looping through the groups the member is in and do an if/else check on each group name, ended up going down to taking about 2 minutes to process vs the original method taking about 10 minutes (so definitely more efficient).

Anyway, thanks for your help and if you end up figuring out why it was not working with the larger scoped connection I would be interested to know.
Also, if you think of anything I can do to help with troubleshooting if you want to continue, just let me know.

Thanks,
-Shark2k