LDAP: Limiting AD-Groups via Group object filter

[Dieter Guthmann]

Hello,

we use Bitbucket connected to an Active Directory.

Our Active Directory is polluted with thousands of groups, so I want to limit the number of groups, which are available in bitbucket.

We have two (relevant) "OU"s
OU=department,DC=company,DC=com
and
OU=sub,OU=department,DC=company,DC=com

I want to filter a few specific groups out of the upper OU, and ALL groups of the OU 'sub'.
So I configured it as follows:

Base DN: DC=company,DC=com
Additional Group DN: OU=department

In "Group object filter" I tried many things but nothing works... :(
In my opinion it has to be

(&(objectClass=group)(|(cn=WildcardForSpecialGroups*)(OU=sub,OU=department,DC=company,DC=com)))

But with that group filter no groups will be imported.

Thanks in advance.

Rgds

Dieter

[Gonchik Tsymzhitov]

Looks like wildcard does not support :(