alexrg/SGU-CredentialProvider
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases 25 Wiki Activity

Handle absent AD role groups during deployment

Browse Source
This commit is contained in:
alexrg
2026-09-08 11:37:35 -06:00
parent 7a4f599f55
commit 1fe2006404
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/Deploy-AuthBroker.ps1
+6 -1
View File
@@ -140,7 +140,12 @@ foreach ($definition in $roleGroupDefinitions) {
throw "$($definition.Role)GroupDn must identify a security group beneath BaseDn." throw "$($definition.Role)GroupDn must identify a security group beneath BaseDn."
} }
$roleGroup = Get-ADGroup -Identity $definition.Dn -Server $LdapHost -ErrorAction SilentlyContinue try {
$roleGroup = Get-ADGroup -Identity $definition.Dn -Server $LdapHost -ErrorAction Stop
}
catch [Microsoft.ActiveDirectory.Management.ADIdentityNotFoundException] {
$roleGroup = $null
}
if (-not $roleGroup -and $CreateMissingOus) { if (-not $roleGroup -and $CreateMissingOus) {
$groupDnMatch = [regex]::Match($definition.Dn, '^CN=(?<Name>[^,]+),(?<Path>.+)$', [Text.RegularExpressions.RegexOptions]::IgnoreCase) $groupDnMatch = [regex]::Match($definition.Dn, '^CN=(?<Name>[^,]+),(?<Path>.+)$', [Text.RegularExpressions.RegexOptions]::IgnoreCase)
if (-not $groupDnMatch.Success) { if (-not $groupDnMatch.Success) {