LDAP Plugin - Syncing Groups from Windows AD (Server 2016) HELP
-
Has anyone been able to get the new syncing of groups feature to work from Microsoft Active Directory yet? If so would you be able to share your config? I've consulted the documentation but it seems to be more focused on OpenLDAP. I have the basic login working. Below is what i have currently.
I am running XOCE from source built using Jarli01's script. Server 5.68.0 Web 5.72.0
-
Update: I had a typo in the Base field. It is now working, but saying that I am in ALL groups.
I suspect I dont have the right values in some of the boxes. Any input?
-
I figured it out! Below is my working configuration for Windows AD including Group Syncing.
-
-
-
-
I wanted to limit users' ability to login to 2 groups
User filter:
(&(sAMAccountName={{name}})(|(memberOf=CN=ServerAdmins,OU=ServerAdmins,OU=Admins,DC=DOMAIN,DC=com)(memberOf=CN=grpDevOPs,OU=Security_Groups,DC=DOMAIN,DC=com)))
Adn groups filter has
(&(objectCategory=group)(|(cn=ServerAdmins)(cn=grpDevOPs)))
I struggled with group sync setup so adding here.
-
@newbie2xcp so you mean you figured out and you wanted to share the solution here?
-
@olivierlambert Yes. Sorry for not making that more clear
-
No problem, happy to see people providing solutions in here! Kudos for that. Would you be interested to contribute to our doc to help even more people at once?