Symantec Access Management

 View Only

Strip characters from front and end of group name

  • 1.  Strip characters from front and end of group name

    Posted Mar 19, 2020 04:22 PM
    User group in LDAP has the following syntax:
    CN=TEAM_INT_ABC_DEF_STD,OU=xxx,OU=Employees,OU=Groups,DC=abc,DC=abcde,DC=com

    But the application wants only ABC_DEF_STD as group name in Headers.
    Using regular expression i am able to strip either ,OU=xxx,OU=Employees,OU=Groups,DC=abc,DC=abcde,DC=com or CN=TEAM_INT_ but not both at the same time.

    for e.g.
    GROUPS=<$expr="ENUMERATE(SM_USERGROUPS,STRING(%0) LIKE 'CN=TEAM_INT_*'?'cn=' + BEFORE(STRING(%0), 'OU=xxx', TRUE):'')"$>


    Is there any way to just get ABC_DEF_STD in the response?