XCP-ng
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Ldap plugin : filter to allow only specific group to login ?

    Scheduled Pinned Locked Moved Xen Orchestra
    2 Posts 2 Posters 220 Views 3 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C Offline
      Chico008
      last edited by

      Hi

      I' setting up the Ldap plugin on my XOCE.

      My conf seems to be OK, but i can't figure out how i can filter only user from specific group to login and refuse other.

      My conf for now
      Uri : ldap://s-ad.domain.net:389
      base : OU=company,DC=domain,DC=net
      credential : account used to connect to Active Directory

      userfilter : my problem
      Id attribut : sAMAccountName

      if i put userfiler : &(sAMAccountName={{name}})
      every user in my company can login
      if i put (&(sAMAccountName={{name}})(memberOf=CN="XCP Admin"))
      no one can login, even users member of "XCP Admin" group.

      How can i set filter to allow only users of this group to be able to login ?

      ? 1 Reply Last reply Reply Quote 0
      • ? Offline
        A Former User @Chico008
        last edited by

        @Chico008 Seems like you're duplicating your inquiries. As I suggested in the previous thread, I think your memberOf is missing the full DN of the group.

        1 Reply Last reply Reply Quote 1

        Hello! It looks like you're interested in this conversation, but you don't have an account yet.

        Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

        With your input, this post could be even better 💗

        Register Login
        • First post
          Last post