We have a single user directory and pull in multiple AD groups by using filters similar to:
(&(objectClass=person)(|(memberOf=cn=xyz1,ou=xyz,dc=company,dc=local)
(memberOf=cn=xyz2,ou=xyz,dc=company,dc=local)
(memberOf=cn=xyz3,ou=xyz,dc=company,dc=local)
(memberOf=cn=xyz4,ou=xyz,dc=company,dc=local))
(!(objectClass=computer)))
but are getting duplicate users which are counted towards our licensed_user count.
Questions:
1. Is there a way duplicate users aren't pulled with the filter query.
2. If duplicates are pulled; due to users having access to multiple AD groups (test and development for eg) they arent counted twice against the licensed_users? I already reviewed https://confluence.atlassian.com/kb/how-to-write-ldap-search-filters-792496933.html but couldn't get any cleaner way.
Product: Bitbucket Server (7.19.2)
