run ldap search using do shell script error with NSSecureTextField

Scripting Forums AppleScriptObjC and Xcode
#1

I’ve a small routine that checks an entered username (textfield) and password (secure text field) again an ldap server to check that the entered creds. Works perfectly under AppleScript editor:


set domainSTR to "bob.com"
set ouSTR to "ou=Employees,ou=Bob Users,dc=bob,dc=com"
set ldapQueryResults to ""
set UserPW to "passwordofuser"
set User to "testuser"

try
	set ldapQueryResults to do shell script "ldapsearch -H ldap://ldap.bob.com -x -D " & CECUser & "@" & domainSTR & " -w " & UserPW & " -b '" & ouSTR & "' -LLL sAMAccountName=" & User
on error errMsg
	set ldapQueryResults to errMsg -- we do this so that the if statements below are neater and all use the same ldapQueryResults variable
end try

log ldapQueryResults


if ldapQueryResults contains "Invalid credentials (49)" then -- Bad credentials. UN / PW not entered correctly
	set CredCheck to "Incorrectly entered credentials. Please try again."
else if ldapQueryResults contains "Can't contact LDAP server" then -- server unreachable: are we connected to the network?
	set CredCheck to "Cannot contact server. Pleasure ensure that you're connected to the network via Ethernet and try again"
else if ldapQueryResults contains "distinguishedName" then -- success
	set CredCheck to "Success! Please click Continue..."
	-- set my ButtonIsEnabled to true -- re-enables continue button
else
	set CredCheck to "There's been an undefined error. Please try again or contact helpdesk"
end if

log CredCheck

for the testing, as mentioned, I run this in AppleScript, and it’s fine. I’ve obviously changed the OU and domain to protect the innocent

If I chuck the same code into Xcode, version 4.5.2, it works fine.

If I then change UserPW and User to reflect the names of the properties bound to the textfield and securetextfield, it fails with the following –

I can see that it’s not passing the contents of the secure text field to the do shell script, but I don’t know how to rectify it. Doubly confused as, in another project, I’ve successfully passed the contents of a secure text field to a do shell script containing a pwpolicy…

So, two questions.

  1. Can I resolve this issue somehow?

  2. If not, is there a built in library I can use for ldap search queries instead?

Thanks in advance

#2

Are you coercing them to AS text using “as text”?

#3

Nope. No changes other than adding in:

set User to "usernametest"
set UserPW to "passwordtest"

at the start to simulate what the user has typed in. It works if I set the password using a variable, but also fails if I use the following line (not assigning the results of the “do shell script” to a variable:

do shell script "ldapsearch -H ldap://ldap.bob.com -x -D " & User & "@" & domainSTR & " -w " & UserPW & " -b '" & ouSTR & "' -LLL sAMAccountName=" & User
#4

I don’t follow you – let’s try again. You’ve posted code you say does work, now post the code that doesn’t.

#5

Shane, humble apologies.

After a coffee this morning, the elixir of life, I realised my mistake

The hint was in the error message: Missing value

Imagine a form, with two text fields, and a submit button

Imagine the user experience. You click in the first text field, and then TAB to the next text field. You click CLICK on the submit button. This wasn’t registering a value for the 2nd text field

So, in XCode, I went to the attributes inspector, control, and selected Continuous (under state)

Bingo! It all now works

Sorry for confusing the hell out of you.

Paul

#6

No problem – now I understand. An alternative is to add the following to your action handler:

tell mainWindow to makeFirstResponder_(missing value)

This forces any editing to be committed. See page 157 of my book.

#7

Perfect!