AD group restrictions

[bradlanham]

Hi, I would like some advise on configuring the 'zimbraExternalGroupLdapSearchBase' and 'zimbraExternalGroupLdapSearchFilter' attributes. I have configured external AD authentication and it is working as expected. I would however further like to restrict users to a particular AD group and I assume these attributes are involved. I have tried populating the fields with values but they do not seem to have any effect. In fact I can enter 'Mary has a little lamb' and do not receive any warnings or change in authentication behaviour. Users not in that group are able to authenticate regardless. Thanks for your help.

[oetiker]

Hi

Did you find the right syntax?

Manuel

[Jordack]

Maybe something like:

zimbraExternalGroupLdapSearchBase: OU=MyUsers,DC=network,DC=domain,DC=org
zimbraExternalGroupLdapSearchFilter: (&(objectClass=organizationalPerson)(memberOf=CN=Application Users - Zimbra,OU=Software Access,OU=Groups,OU=MyUsers,DC=network,DC=domain,DC=org))