topic Re: Retrieve OU (Organizational Unit) users from Active Directory LDAP Filter in Management & Governance

Retrieve OU (Organizational Unit) users from Active Directory LDAP Filter

lanlizgu — Wed, 18 Apr 2018 11:24:44 GMT

Hi,

I am trying to connect to the AD through the Organizational Unit (without success).

In Additional LDAP filter I can retrive correctly the users named Joe if I enter the following:

(givenName=*Joe*).

However, when I try to retrieve all the users of a specific OU (containing myou), I don't get any user

(ou=*myou*).

Any help?

Thank you

Lauri — Thu, 19 Apr 2018 19:27:36 GMT

I use this as my connection string:

(memberof=CN=qlik,OU=MyMembers,DC=mydc,DC=local)

I believe you need to specify the DC, in addition to the OU. In my case, I also specify the CN (security group named 'qlik').

lanlizgu — Tue, 24 Apr 2018 07:25:31 GMT

Thank you Lauri,

How can I know the CN?

If I connect to the LDAP through "OLEDB Provider for Microsoft Directory Services" filtering by a SAMAccountName I obtain the following ADsPath.

LDAP://xxxxxxx.es.xxxxx.net/CN=xxxxx,OU=Users,OU=Group,DC=es,DC=xxxx,DC=net

Obviously x are to avoid providing the real data. The thing is that the value inside CN= is the id of the user, not of a group.

I would like to connect directly filtering the data inside the OU. How can I do it?

lanlizgu — Wed, 25 Apr 2018 16:29:00 GMT

Thank you Lauri,

At the end I have been able to read the LDAP. I created a Security group adding users on them and added the following syntax:

(memberof=CN=my security group name,OU=Groups,OU=Organizational Unit Name,DC=es,DC=companyname,DC=net)

However, Do you know if it is possible to read Organizational Units in order to avoid creating these security groups?

Lauri — Tue, 01 May 2018 20:23:22 GMT

Hi Lan,

Did you try:

(OU=Organizational Unit Name,DC=es,DC=companyname,DC=net)

You should be able to skip the CN.