Query for retrieving "not disabled" users in Active Directory

[emiliosh]

Hi, I'm struggling in getting only enabled Active Directory users.

I'm using an Scope like this.

public function apply(Builder $query, Model $model): void
{
   $accountcontrol = new AccountControl(AccountControl::ACCOUNTDISABLE);
   $query->in('ou=_Usuarios,{base}')->whereHas('employeeid')->rawFilter('!'.$accountcontrol->filter());
}

It returns:

LdapRecord\LdapRecordException
ldap_search(): Search: Bad search filter

If I remove '!'. concat everything it's ok, but I need it with !.

Using LdapRecord v3.

Thanks in advance.

[stevebauman]

Hi @emiliosh,

If you'd like to use it, there is already a built-in query builder method to return only enabled users:

LdapRecord/src/Query/Model/ActiveDirectoryBuilder.php

Lines 37 to 45 in 496fd44

	/**
	* Adds a enabled filter to the current query.
	*/
	public function whereEnabled(): static
	{
	return $this->notFilter(
	fn ($query) => $query->whereDisabled()
	);
	}

public function apply(Builder $query, Model $model): void
{
    $query->whereEnabled();
}

However, if you'd like to do this yourself, try:

$query->notFilter(
    fn ($query) => $query->rawFilter(
        (new AccountControl)->setAccountIsDisabled()->filter()
    )
);

Let me know if this answers your question! 👍

[emiliosh]

Thanks a lot, works perfectly!