LDAP filter in Confluence

[Karolina]

Hello,

I have confluence which is connected to MS AD.
As a root DN I set up root of my LDAP tree, but I would like to search only in few OU which are subdirectories of root DN.

How can I build filter to perform such search?

When I add to : “Additional User DN” filters like “ou=User1; ou=User3;ou=SomeName,ou=Users”

It’s is searching only in firs OU(Users1).

Maybe I should separate OU list in some other way ?

Let’s say that my LDAP tree looks like this:

dc=domainexemple,dc=internal
|
--OU(Users1)
|
--OU (Users3)
|
--OU (SomeName)
| |
| OU(User)
|
|--OU(OtherOU)

Please help me with building the filters.

Regards

Karolina

[Wayne Wong]

Hi Karolina,

From the example tree that you provided, if you want to search all OU, you dont need to set any filter so it will return all the OU, or is that any specific object you want to filter?

[Zulfadli Noor Sazali]

You can specify the filter for the OU on either User Object Filter or Group Object Filter, depends on what the OU is for. Additional User DN or Addtional Group DN don't allow multiple OU to be configured.

To configure the Object Filter, you can refer to the following:

• https://confluence.atlassian.com/display/DEV/How+to+write+LDAP+search+filters
• https://confluence.atlassian.com/display/CROWD/Restricting+LDAP+Scope+for+User+and+Group+Search