Use the get_pending_zone_users command to check Active Directory and return a Tcl list of pending import users for the currently selected zone. Pending import users are user profiles that have been imported from Linux or UNIX computers, but not yet mapped to any Active Directory user. If executed in a script, this command does not output its list to stdout, and no output appears in the shell where the script is executed. Use list_pending_zone_users to output the list to stdout.

Zone type

Classic and hierarchical






This command takes no options.


This command takes no arguments.

Return value

This command returns a Tcl list of pending import user profiles that have been imported into the currently selected zone. Each entry in the list contains the following fields, separated by colons (:):

  • Distinguished name (DN) of the pending import user as it is stored in Active Directory. The distinguished name for each pending import user includes a prefix that consists of “PendingUser” and the globally unique identifier (GUID) for the user.
  • UNIX user name.
  • Numeric user identifier (UID).
  • Numeric primary group identifier (GID).
  • Personal information from the GECOS field.
  • Home directory.
  • Default login shell.



This sample command might return output similar to the following:

CN=PendingUser_09024f3a-6abc-4666-a127-722f9fe0e0bf,CN=Users,CN=finance, CN=Zones,CN=Acme,DC=win2k3,DC=test:root:0:0:root:/root:/bin/bash
CN=PendingUser_0b9fe038-1325-438f-8529-cb190ab5914a,CN=Users,CN=finance, CN=Zones,CN=Acme,DC=win2k3,DC=test:bean:6001:5000:bean.zhang:/home/bean:/bin/bash

Before you use this command, you must have a currently selected zone stored in memory. The following command performs actions related to this command:

  • select_object retrieves the specified Active Directory object and its attributes from Active Directory and stores the object in memory.
  • get_object_field enables you to view and work with the pending import group.