{
    "task_name": "ad_task",	
    "task_details": {
	"ad_host": "<HOST_NAME>",
	"ad_dn": "<DN OF THE AD MACHINE>",
	"activity_name": "create_object",
	"object_name": "<OBJECT_NAME>",
	"organization_unit": "<ORGANIZATION_UNIT_NAME>",
	"object_type": "user",
	"properties": {
		"ObjectClass": "user",
		"givenName": "<DISPLAY NAME OF THE USER>"
	}
    },
    "credential": {
	"name": "<CREDENTIAL_NAME>"
    }
}

{
    "task_name": "ad_task",	
    "task_details": {
	"ad_host": "<HOST_NAME>",
	"ad_dn": "<DN OF THE AD MACHINE>",
	"activity_name": "create_object",
	"object_name": "<OBJECT_NAME>",
	"organization_unit": "<ORGANIZATION_UNIT_NAME>",
	"object_type": "computer",
	"properties": {
		"ObjectClass": "computer",
		"givenName": "<DISPLAY NAME OF THE OBJECT>"
	}
    },
    "credential": {
	"name": "<CREDENTIAL_NAME>"
    }
}

{
    "task_name": "ad_task",	
    "task_details": {
	"ad_host": "<HOST_NAME>",
	"ad_dn": "<DN OF THE AD MACHINE>",
	"activity_name": "create_object",
	"object_name": "<OBJECT_NAME>",
	"organization_unit": "<ORGANIZATION_UNIT_NAME>",
	"object_type": "group",
	"properties": {
		"ObjectClass": "group",
		"givenName": "<DISPLAY NAME OF THE GROUP>"
	}
    },
    "credential": {
	"name": "<CREDENTIAL_NAME>"
    }
}

Add User To Group

{
    "task_name": "ad_task",	
    "task_details": {
	"ad_host": "<HOST_NAME>",
	"ad_dn": "<DN OF THE AD MACHINE>",
	"activity_name": "create_object",
	"object_name": "<OBJECT_NAME>",
	"organization_unit": "<ORGANIZATION_UNIT_NAME>",
	"object_type": "group",
	"properties": {
		"ObjectClass": "group",
		"givenName": "<DISPLAY NAME OF THE GROUP>"
	}
    },
    "credential": {
	"name": "<CREDENTIAL_NAME>"
    }
}

{
    "task_name": "ad_task",      
    "task_details": {
	"ad_host": "<HOST_NAME>",
	"ad_dn": "<DN OF THE AD MACHINE>",
	"activity_name": "disable_user",
	"user_name": "<USER_NAME>"
    },
    "credential": {
	"name": "<CREDENTIAL_NAME>"
    }
}

{
    "task_name": "ad_task",	
    "task_details": {
	"ad_host": "<HOST_NAME>",
	"ad_dn": "<DN OF THE AD MACHINE>",
	"activity_name": "enable_user",
	"user_name": "<USER_NAME>"
    },
    "credential": {
	"name": "<CREDENTIAL_NAME>"
    }
}

{
    "task_name": "ad_task",	
    "task_details": {
	"ad_host": "<HOST_NAME>",
	"ad_dn": "<DN OF THE AD MACHINE>",
	"activity_name": "unlock_account",
	"user_name": "<USER_NAME>"
    },
    credential": {
	"name": "<CREDENTIAL_NAME>"
    }
}

{
    "task_name": "ad_task",	
    "task_details": {
	"ad_host": "<HOST_NAME>",
	"ad_dn": "<DN OF THE AD MACHINE>",
	"activity_name": "reset_password",
	"user_name": "<USER_NAME>",
	"password": "<PASSWORD>",
	"is_unlock_account": true,
	"is_user_reset_password_next_logon": true
    },
    "credential": {
	"name": "<CREDENTIAL_NAME>"
    }
}

2. Why am I unable to connect to the AD server through Bridge?

• Check whether the Bridge host machine can communicate with the AD server over the network.
• Verify that the hostname and port (389 for LDAP / 636 for LDAPS) are correct.
• Ensure that no firewall restrictions or proxy settings are blocking communication.
• Confirm that the Bridge service is running and has network access.
  

3. I’m getting “Invalid credentials” while executing AD operations. What should I do?

• Recheck the User DN and Password provided while creating the AD credential in Qntrl.

• Make sure the AD user account has the required permissions to perform create, modify, or delete operations.

• If credentials were updated or reset recently in AD, update them in Qntrl as well.
  

4. LDAPS connection is failing. How can I fix it?

• Confirm that AD Lightweight Directory Services (AD LDS) is enabled on the AD server.
• Verify that the SSL certificate for LDAPS is valid and imported into the Bridge machine.
• Open the Bridge/conf/ldap-config.properties file and ensure the following settings are correct:
• bridge.ldap.use.ssl=true
  bridge.ldap.ssl.certificate.path=<PATH_TO_CERTIFICATE>
• If using a .pfx certificate, encrypt the password before adding it:
• bridge.ldap.ssl.certificate.password=<ENCRYPTED_PASSWORD>
• Restart the Bridge service after updating the configuration.

5. My LDIF scripts are failing. What could be wrong?

• Ensure that your script follows the LDIF format and uses variables in the format %q_<variable_name>%.

• When referencing variables in Bridge payloads or Circuit variables, omit the %q_% prefix and use only the snake_case variable name.

• Example: In script → %q_mail_id% , In payload → mail_id

• Confirm that the LDIF task being executed supports the operation. (Read/filter operations are not supported via LDIF scripts.)
  

6. How do I view detailed logs for failed AD executions?

• Open Bridge Agent >> Core Service >> Logs to view real-time execution details.

• Download the log file for deeper analysis using Bridge Agent → Logs → Download Log File.

• You can also access logs locally from Bridge/logs/  
  

7. The Bridge service is running, but no tasks are being executed. What can I do?

1. Restart the Bridge service to refresh connections.
   
2. Check the Bridge logs (Bridge/logs/bridge.log) for any authentication or certificate-related errors.
   
3. If the issue persists, verify if the bridge agent is mapped correctly in Qntrl under Settings >> Bridge >> Installed Bridges.