LDAP filter in Confluence

Question

Hello, I have confluence which is connected to MS AD. As a root DN I set up root of my LDAP tree, but I would like to search only in few OU which are subdirectories of root DN. How can I build filter to perform such search? When I add to : “Additional User DN” filters like “ou=User1; ou=User3;ou=SomeName,ou=Users” It’s is searching only in firs OU(Users1). Maybe I should separate OU list in some other way ? Let’s say that my LDAP tree looks like this: dc=domainexemple,dc=internal | --OU(Users1) | --OU (Users3) | --OU (SomeName) | | | OU(User) | |--OU(OtherOU) Please help me with building the filters. Regards Karolina

Zul NS [Atlassian] · Answer

You can specify the filter for the OU on either User Object Filter or Group Object Filter, depends on what the OU is for. Additional User DN or Addtional Group DN don't allow multiple OU to be configured.

To configure the Object Filter, you can refer to the following:

* https://confluence.atlassian.com/display/DEV/How+to+write+LDAP+search+filters
* https://confluence.atlassian.com/display/CROWD/Restricting+LDAP+Scope+for+User+and+Group+Search

Wayne Wong · Answer

Hi Karolina,

From the example tree that you provided, if you want to search all OU, you dont need to set any filter so it will return all the OU, or is that any specific object you want to filter?