Get users from Directory Service Group using Tom.net

Question

We have a requirement in which we have to maintain all users under AD directory instead of Tridion and SDL tridion is integrated with Ad through LDAP, that means the user groups which we are going to create in tridion will not holds any users directly. User groups will hold Directory Service Group which is a group in AD and in that group we have assigned all the users in AD. So now my question is how to fetch all the users from directory service group which we assigned into the Tridion User group. I have code which can provide all the user and user groups name if those are assigned directly into the Tridion Group. Below is the code which I am using to fetch all the users from tridion

            Group approverGroup = new Group(new TcmUri(groupId), session);
            IEnumerable<Trustee> trustees = approverGroup.GetGroupMembers();
            foreach (Trustee trustee in trustees)
            {
                if (trustee == null)
                {
                    LoggerStream.WriteLine("trustee Not Found");
                    continue;
                }
                //local variable declaration.
                string userName  = trustee.Title.Split('\\')[1]; 

Now I need help regarding Directory service group that how to get all users using TOM.net.

Answer 1

There is a way through TOM.Net to get all the users from the Directory Service Group, as I found and able to retrieved all the users from Directory Service Group in event system code using TOM.NET.

Below is the code to get all users from specific Directory Service Group.

            string activeDirectoryGroup = string.Empty;
            List<ClaimMapping> activeUserGroups = (List<ClaimMapping>)approverGroup.ClaimMappings;
            foreach (ClaimMapping activeUG in activeUserGroups)
            {
                SearchResult result;
                DirectorySearcher search = new DirectorySearcher();

                activeDirectoryGroup = activeUG.Value.Split(',')[0].ToString().Split('=')[1].ToString();
                search.Filter = String.Format("(cn={0})", activeDirectoryGroup);
                search.PropertiesToLoad.Add("member");
                result = search.FindOne(); 

                ArrayList userNames = new ArrayList();
                if (result != null)
                {
                    for (int i = 0; i < result.Properties["member"].Count; i++)
                    {                            
                        string userDisplayName = (String)result.Properties["member"][i].ToString().Split(',')[0].ToString().Split('=')[1].ToString(); ;
                        SendmailToUser(userDisplayName, session, element, currentComponent, currentPage);
                    }
                }
            }                      

Answer 2

Unfortunately there's no way to do it in TOM.NET (AFAIK). Here's how to do it using CoreService. If you are using GroupSync you need to get the LDAP address by looking at ClaimMappings property of GroupData. For each of claim mapings you need to do:

var group = (GroupData) client.Read(groupId, readOptions);
var result = new List<DirectoryServiceUser>();
foreach ((DirectoryGroupMappingData) claimMapping in group.ClaimMappings)
{
    if (claimMapping.SearchType = DirectorySearchType.Subtree)
    {
        result.AddRange(client.GetListDirectoryServiceUsers(claimMapping.DirectoryServiceName,
            new DirectoryUsersFilter{ SubtreeDN = claimMapping.SearchDN }));
    }
    else
    {
        result.AddRange(client.GetListDirectoryServiceGroupMembers(claimMapping.DirectoryServiceName, claimMapping.SearchDN));
    }   
}