filter users by openldap group

[Vladimir Rora]

Hi,
We use openldap 2.4 for user authentication.
We want to hide all users in confluence if they don't members of one ldap group.
But in openldap we don't have memberOf attribute.
How we can filter users in confluence?

[Shannon Spaniol]

Vladimir,

Can you let us know what you mean by "hide" the users? You mean they shouldn't have Confluence accounts created for them at all, or do you just not want them to be visible to other users?

You should be able to use the memberOf attribute to restrict to a certain group, and according to this article online, it's possible to enable it for OpenLDAP.

Kind Regards,
Shannon

[Vladimir Rora]

We have many system accounts, fired users accounts, locked users, etc.
And we have one group for actual user accounts "alive_users".

We want to see only users from "alive_users" group in "Users managment" and others pages in Confluence.

Our ldap don't have memberOf, we try enable it, but our ldap dont use "cn=config", so, try failed.

Can we filter users by group in Confluence?

[Ann Worley]

If the user objects in OpenLDAP have an attribute that indicates they are in a group then you can filter on that attribute. Confluence uses LDAP queries to filter users and groups but if there is no attribute, Confluence doesn't have anything to use in the query.

Would it be possible to put all the users (alive_users) you want to see in Confluence in the same OU? Then you could use the Additional User DN field to filter the users.