Trouble with special characters and powershell orchestration

[adamrasmussen]

Inside our AD environment we have several users that have special characters, such as commas or apostrophes in their distinguished names.  I've tried using .replace and .split, and various other methodologies of inserting the backslash as an escape character before these values (e.g. "\," or "\'", but everytime it appears as if ServiceNow is stripping them out before sending them over to the midserver for execution.

For example, when attempting a rename-adobject via Run Powershell activitity, what I need to send is:

rename adobject -Identity "CN=Test\, Bob,OU=Users,OU=domain,OU=com" -NewName "Bob Test"

What actually gets sent to the ECC queue is:

rename adobject -Identity "CN=Test, Bob,OU=Users,OU=domain,OU=com" -NewName "Bob Test"

Notice the missing slash before the common in the DN.  This leads to the ECC Queue error of:  

Cannot find an object with identity: 'CN=Bob, Test,OU=Users,OU=Users,DC=domain,DC=com' under: 'DC=domain,DC=com'.Stack Trace: at   Microsoft.ActiveDirectory.Management.Commands.ADFactoryUtil.GetADObjectSearcherFromIdentity(ADEntity identityObj, String searchRoot, Boolean showDeleted, IADOPathNode structuralObjectFilter, IADOPathNode identityFilter, IdentityResolverDelegate[] identityResolvers, CmdletSessionInfo cmdletSessionInfo)at   Microsoft.ActiveDirectory.Management.Commands.ADFactory`1.GetDirectoryObjectFromIdentity(T identityObj, String searchRoot, Boolean showDeleted)at Microsoft.ActiveDirectory.Management.Commands.ADRenameCmdletBase`3.ADRenameCmdletBaseProcessC SRoutine()at Microsoft.ActiveDirectory.Management.CmdletSubroutinePipeline.Invoke()at   Microsoft.ActiveDirectory.Management.Commands.ADCmdletBase`1.ProcessRecord()

Issuing the command via Powershell directly and inserting the appropriate backslash works fine.

I have the same issue with someone whose last name is O'Conner.

Any help would be appreciated.

[oharel]

Hi Adam,

Try: / before the \' as in:

CN=Test/\,

It would look like this:

var bobTestDN = "CN=/\Test, Bob,OU=Users,OU=domain,OU=com"

I had the same issue with: c:\folder\somefile.txt, where I changed it to c:/\folder/\somefiile.txt

harel

[adamrasmussen]

Was a good suggestion, but sadly it's still not working.   We're still on Fuji for what it's worth.

Code I am using looks like this:

var firstIdx = workflow.scratchpad.emp_dn.indexOf(",");

var lastIdx = workflow.scratchpad.emp_dn.indexOf(",OU");

if (firstIdx < lastIdx){

        workflow.scratchpad.emp_dn.replace(',','/\,');

        workflow.scratchpad.foundComma = 'yes'; //debug to ensure this triggered

}

I'm seeing the foundComma value, in my debug output so I know it's firing, but the workflow.scratchpad.emp_dn value remains without the backslash.

[adamrasmussen]

To be clear, it's only the comma in the CN portion of the DN that's causing the issue.   The commas in the OU portion are fine and expected and the code works fine when the CN doesn't contain a comma.

[oharel]

Hi Adam,

This works for me, maybe it will set you on a path to solve it:

I created a UI action and sent this to the ECC Queue:

the CN is ldap:CN=\id4, id4,OU=All Accounts,DC=myCompany,DC=dmn;

thisEcc();
   function thisEcc() {

   var thisName = 'ldap:CN=' + '\\' + 'id4, id4,OU=All Accounts,DC=myCompany,DC=dmn';
   var ecc = new GlideRecord('ecc_queue');

   ecc.initialize();
   ecc.agent = 'harel';
   ecc.topic = 'HAREL';
   ecc.queue = 'output';
   ecc.name = thisName;
   ecc.insert();
   }

harel

Please mark as correct or helpful based on impact.

[adamrasmussen]

I think you're onto something there.   It looks to me as if the .replace method is the culprit.   I'm setting up to split the code and to manually concatenate the strings and backslashes, etc.

Will get back soon.