topic Re: LDAP with multipule domain groups in Integration, Extension & APIs

LDAP with multipule domain groups

s_lobunko — Thu, 19 Nov 2020 14:08:46 GMT

Hello everyone.

I have a problem with a LDAP filter setting. My purpose is configure LDAP filter so that I will can upload users from Domain groups on mask. For example, I want uploading users from all groups that beginning with"Qliksense". But i don't know how write this filter. When I tryied configure LDAP I wrote this rule (memberOf=CN=MyGroup, CN="",DC=""). This rule works with one group. But I want to create a filter that will upload all groups that beginning with QlikSense

Re: LDAP with multipule domain groups

Marc — Tue, 12 Jan 2021 00:33:01 GMT

you cannot use wildcard character with DN attributes like memberOf

the easiest way to achieve what you are after, would be to get all of the groups you want to include and make them part of a parent group.

e.g.
All_QlikSenseGroups
- QlikSense_Users
- QlikSense_Developers
- QlikSense_ETC

Then you can modify the FQDN and use the following, which will look at the top level group and dig down through all the nested groups for the members.

(memberOf:1.2.840.113556.1.4.1941:=CN=All_QlikSenseGroups,OU=Security_Groups_OU,DC=int,DC=domain,DC=net)