Delegated LDAP setup help please

ISA Admin

I have so far been unsuccessful in setting up Delegated LDAP. Based on what I have found scouring the internet so far I have some settings that I put in and "testing" the settings works so I know my user can connect to my server. I am obviously doing something wrong with one or all of the following or maybe even something else.

SecurityGroup = The actual security group I placed users in.
Company Name= The OU that SecurityGroup is located in.

Base DN: CN=SecurityGroup,OU=Company Name,DC=Company,DC=com

User Object Class: user

User Object Filter: (&(objectCategory=Group)(sAMAccountName=*)(memberOf=CN=Security Group,OU=Company Name,DC=Company,DC=com))

 

 

Thomas Schlegel

Hi,

maybe your problem is the strange matching rule id described here: 

https://docs.microsoft.com/de-de/windows/desktop/ADSI/search-filter-syntax

We have to query like this:

(memberof:1.2.840.113556.1.4.1941:=CN=xxx,OU=xxx,OU=xxx,OU=xxx,DC=xx,DC=xx,DC=xx))"