LDAP multiple Groups / Wildcard doesn't work

[TobiasW]

Hello everyone,

i got an issue with importing users/groups using LDAP.

When I use this Command in the "Additional user Filters":
((&(memberOf=CN=NPrintingTest2,OU=Gruppen,OU=Test Users,DC=TEST,DC=local)))
The Users in this group get Imported just fine, but as soon as i add a Wildcard at the Group it wanna import every Group of the "Folder/OU" Gruppen, but no user.
Example:
((&(memberOf=CN=NP*,OU=Gruppen,OU=Test Users,DC=TEST,DC=local)))

Any ideas?

Happy about every tip, sadly i have no real experience with LDAP and the Syntax.

Greetings,
Tobi

[Ruggero_Piccoli · Accepted solution]

Hi,

Qlik NPrinting sends the LDAP filters directly to the LDAP server that sent back the results. So you have to write filters by using LDAP supported syntax. My suggestion is to test the filters by using an LDAP client before adding them in an import task.

About the usage of * in LDAP filters, I found the article  https://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filter... that states: "The wildcard character "*" is allowed, except when the <AD Attribute> is a DN attribute. Examples of DN attributes are distinguishedName, manager, directReports, member, and memberOf. If the attribute is DN, then only the equality operator is allowed and you must specify the full distinguished name for the value (or the "*" character for all objects with any value for the attribute).". I hope this helps.

Best Regards,

Ruggero