topic Re: Get user AD groups in Visual LISP, AutoLISP and General Customization Forum

Get user AD groups

drew_dewit — Thu, 19 Mar 2020 15:46:44 GMT

I am looking to load lisp routines in an acaddoc based on the users Active Directory groups. Has anyone done this before? How can i connect a LISP routine to active directory.

Re: Get user AD groups

Nick_Hall — Thu, 19 Mar 2020 22:56:51 GMT

This isn't elegant, but it will work

It involves running net user /domain for the current user & parsing the output

It involves some temporary files - I've put everything in C:\Temp in this example

Create c:\temp\ad.bat

@Anonymous off net user /domain %1 > c:\temp\out.txt

In your lisp code call it like this

(startapp "c:\\temp\\ad.bat" (getenv "USERNAME"))

That will create a text file c:\temp\out.txt
Open the file & read all the lines until you get to one that starts with Global Group memberships
From that line to the end of the file you get a list of groups

Logon hours allowed All Local Group Memberships Global Group memberships *CADPRO-USERS *CADPRO-MANAGE *CADPRO-VPN *Domain Users *CADPRO-TECH

Split each line to get the group names, which begin with a *

You can do it more elegantly using a tool like DOSLib - https://wiki.mcneel.com/doslib/home - which will allow you to hide the DOS window

Hope that helps

Nick

Re: Get user AD groups

CodeDing — Fri, 20 Mar 2020 13:54:09 GMT

@drew_dewit ,

Using @Nick_Hall 's approach, this will get you the contents of the text file. I don't have time to mess with it much, but it's a start in the right direction.

I found that I needed to add about a 3 second pause until the file could be executed through the command prompt.

(defun c:TEST ( / fMain fOut f txt str time) (setq fMain (vl-filename-mktemp nil nil ".bat")) (setq f (open fMain "w")) (write-line "@echo off" f) (write-line (strcat "net user /domain %1 > \"" (setq fOut (vl-filename-mktemp nil nil ".txt")) "\"") f) (close f) (startapp fMain (getenv "USERNAME")) (setq txt '() time (getvar 'MILLISECS)) (while (< (- (getvar 'MILLISECS) time) 3000);<-- wait 3 seconds ;do nothing );while (setq f (open fOut "r")) (while (setq str (read-line f)) (setq txt (cons str txt)) );while (close f) ;Do stuff with file contents here.. (foreach str txt (princ "\n") (princ str) );foreach (princ) );defun

Best,

~DD

Re: Get user AD groups

Sea-Haven — Sat, 21 Mar 2020 05:15:40 GMT

You would be better writing bat to a known directory as the files are never erased if using vl temp unless after reading does a delete.

(vl-file-delete f) (princ) ) ; end defun

Re: Get user AD groups

Nick_Hall — Sun, 22 Mar 2020 20:02:45 GMT

Thanks @CodeDing for creating a fuller solution - I have a neat & tidy version for node.js but didn't have the time to work up an Autolisp version

Re: Get user AD groups

CodeDing — Sun, 22 Mar 2020 20:16:05 GMT

@Sea-Haven ,

I have not personally tested, but according to vl-filename-mktemp documentation:

"All file names generated by vl-filename-mktemp during a session are deleted when you exit the application."

Re: Get user AD groups

Sea-Haven — Sun, 22 Mar 2020 23:55:49 GMT

Thanks for that always learning, only issue may be if you don't exit cleanly etc.but delete-file will probably not be used also.