- 18 Dec 2024
- 3 Minutes à lire
- SombreLumière
- PDF
domainQuery (Command)
- Mis à jour le 18 Dec 2024
- 3 Minutes à lire
- SombreLumière
- PDF
The domainQuery command queries domains that match specified search criteria.
When using Active Directory as data store, only the default domain is returned.
Parameters
Parameter name | Data type | Description |
---|---|---|
sessionID | String | Required. The session identifier of the current administrative session. The logon command returns this identifier after a successful logon (see logon (Command)). |
attributeSet | DomainAttributeSet | Optional. A set containing zero or more attribute fields that specify the query search criteria. See DomainAttributeSet (Data type). |
fieldSet | DomainFieldSet | Optional. Specifies the attribute fields to be returned for all the records matching the search criteria. See DomainFieldSet (Data type). If fieldSet is omitted, all possible output parameters are returned. If a domain attribute field is not set in the database, it is not returned for that specific domain record. |
queryOptions | DomainQueryOptions | Optional. Options to determine what results should be returned. See DomainQueryOptions (Data type). |
Parameter name | Data type | Description |
---|---|---|
results | DomainQueryResults | Required. Result structure containing return and status codes and a list of zero or more result attribute fields. See DomainQueryResults (Data type). |
DomainAttributeSet (Data type)
The attributes specified in this attribute set define the search criteria.
Search attribute fields are interpreted as follows:
- A wildcard character (*) can be added to the values at the start, the end, or both. They will be interpreted as the SQL LIKE statement.
A list of comma-separated values can be specified for the attribute that specifies the domain name. In this case it will be interpreted as the logical OR of the given values.
You cannot use wildcard characters in comma-separated values.
- If none of the above applies, the search will be done using the exact match of the given value.
Element name | Data type | Description |
---|---|---|
attributes | DomainAttribute | Attributes specifying the domain query search criteria (see Table: DomainAttribute (Data type)). |
Element name | Data type | Description |
---|---|---|
attributeOptions | AttributeOptions | Specifies how to handle the attribute value during request processing, where each option is added as a single element to attributeOptions, e.g.: <negative>true</negative> Supported values:
|
value | Any | The attribute value. The data type has to be specified by setting the xsi:type XML attribute. |
attributeID | DomainAttributeIDEnum | The attribute identifier (see Table: domainQuery (Supported input attributes)). |
For more information about the specific attributes, see Table: domainExecute field attributes.
DomainFieldSet (Data type)
The attributes specified in the fieldSet parameter specify the domain attribute fields that should be returned by OneSpan Authentication Server for the domains matching the search criteria.
If fieldSet is omitted, all possible output parameters are returned. If an attribute field is not set in the database, it is not returned for that specific record.
Element name | Data type | Description |
---|---|---|
attributeID | DomainAttributeIDEnum | The identifier of an attribute to return (see Table: domainQuery (Supported output attributes)). |
For more information about the specific attributes, see Table: domainExecute field attributes.
DomainQueryOptions (Data type)
This data type determines what results should be returned.
DomainQueryResults (Data type)
Element name | Data type | Description |
---|---|---|
resultCodes | ResultCodes | Required. The result and status codes returned by the command. For more information, refer to the OneSpan Authentication Server SDK Programmer's Guide, Section "Error and Status Codes". |
resultAttribute | DomainAttributeList | Required. List containing the queried domain attributes. Each item is of type DomainAttributeSet (see DomainAttributeSet (Data type)). |
resultCount | Integer | Required. The number of items in resultAttribute. |
errorStack | ErrorStack | Required. The error stack, indicating that the command has not completed successfully. |
Example
<?xml version="1.0" encoding="UTF-8"?> <SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/"> <SOAP-ENV:Header/> <SOAP-ENV:Body> <adm:domainQuery xmlns:adm="http://www.vasco.com/IdentikeyServer/IdentikeyTypes/Administration" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <sessionID>Z]9__csvUoTHaO4#E1_gn1S[+FI+vw~x</sessionID> <attributeSet> <attributes> <value xsi:type="xsd:string">master</value> <attributeID>DOMAINFLD_DOMAIN</attributeID> </attributes> </attributeSet> <queryOptions> <rowcount>1</rowcount> <rowoffset>0</rowoffset> </queryOptions> </adm:domainQuery> </SOAP-ENV:Body> </SOAP-ENV:Envelope>
Requirements
Required administrative privileges:
- View Domain
Additional considerations
After upgrading OneSpan Authentication Server, server data is continuously migrated while the already-upgraded OneSpan Authentication Server service is running. Until data migration has been completed, the result of a query command may be incomplete and may include both migrated and non-migrated data. This means that values for new data fields may be missing or not set correctly in the query result.