Hi,
we currently face the problem that we need to add an additional corp domain from an LDAP into crowd.
Is this possible in any way?
If so, how would this be handled in the Base DN and the User object filter?
Thanks in advance!
Hello and welcome to the Community @Phillip Horstmeier
Yes, but it depends on what you mean by “additional corp domain.
Another email suffix, another OU subtree, or a separate AD domain ?
Hey @Phillip Horstmeier ,
First, which version of the Crowd are you using?
I mean, it's possible, but it kind of depends on your directory structure and which IdP you are using (Microsoft AD or something else?). 👀
I think, for Base DN, if you have something like this:
ou=domain1,dc=example,dc=com and ou=domain2,dc=example,dc=com
ou=domain1,dc=example,dc=com
ou=domain2,dc=example,dc=com
You could set the Base DN to dc=example, dc=com.Basically, broaden the Base DN.
If that's not feasible, you could try using an LDAP filter to target some specific components. For example, to ensure only users with a valid username attribute are synced, you might use:
(&(objectCategory=Person)(sAMAccountName=*))
Note that this is relatively theoretical from my side. I've configured this only once or twice, and it was a while back, so it might need some tweaking.
Some resources that might help:
Cheers,Tobi
Welcome to the Community @Phillip Horstmeier
Do you still need assistance?
Best
Fadoua
Hi, sorry for the late response. We could solve it by just adding a second directory using both at the same time. Thank you for the responses!
Thanks @Phillip Horstmeier for letting us know.
It looks like you're new here. Sign in or register to get started.
