topic Re: Directory User Connector - Active Directory in Management & Governance

Directory User Connector - Active Directory

marley1978 — Fri, 23 Jun 2017 12:29:00 GMT

I am trying to figure out how to add multiple AD Groups using the LDAP Filter option.

Currently I have this and it works for one group.

(memberof=CN=QLIK_Marketing,OU=Groups,DC=XX,DC=mycompany,DC=com)

How do I add more than one group? Also can I add filters for a user that is not part of a group?

Thanks

Re: Directory User Connector - Active Directory

jaisoni_trp — Fri, 23 Jun 2017 15:59:06 GMT

Try something like

(&(|(memberof=CN=QLIK_Marketing,OU=Groups,DC=XX,DC=mycompany,DC=com)

(memberof=CN=QLIK_R&D,OU=Groups,DC=XX,DC=mycompany,DC=com))(objectClass=user))

You can also pass on LDAP string in user and AD group through control panel.

Re: Directory User Connector - Active Directory

marley1978 — Fri, 23 Jun 2017 16:41:08 GMT

Thanks,

What do you mean pass LDAP String in user and ad group through control panel?

Re: Directory User Connector - Active Directory

jaisoni_trp — Fri, 23 Jun 2017 18:12:52 GMT

Have a look at "Doing a Search Using Active Directory Users and Computers"

https://technet.microsoft.com/en-us/library/aa996205(v=exchg.65).aspx

Re: Directory User Connector - Active Directory

barry_stevens — Mon, 26 Jun 2017 00:41:42 GMT

This was my solution - doing in AD (add the groups to a single group in AD) not Qlik - you'll still see that they are members of all the groups

Re: Active Directory several groups (User directory connectors)‌

Snipet from the above

However, another way is to have a single Group (QLIK-ALL) that contains those two groups and use the rules within qlik to control access. When you bring a user in it brings in all the groups it is a member of so you can then use the Admin and user group in qlik rules. In this case you could use the following

(&(objectCategory=person)(objectClass=user)(&memberOf=CN=QLIK-ALL,ou=***,ou=***,ou=***,DC=***,DC=***)))

Hope this helps

Barry