How do I write a Active Directory filters for multiple user and group OU's?

[Jasen Sparacino]

We have a somewhat complicated AD set up that spreads out our users that need access to JIRA.  We are experiencing performance problems now and we need to limit where JIRA is looking for user and groups.  I have looked at the docs and I am still having issues getting something together.  We have 3 different OU locations that contain users and 2 locations where the groups that JIRA uses for access to thing within JIRA.  I am having a hard time figuring out the most efficient way to do this.  Thanks in advance.  

[Pedro Cora · Accepted solution]

You can do two things:

1. Write a really complex LDAP filter (https://confluence.atlassian.com/display/DEV/How+to+write+LDAP+search+filters);
2. Configure multiple directories and split the users based on the OUs.

-- Pedro

[Jasen Sparacino]

What would that look like and where do I put the actual filters? There are User, Group, and Membership Schema Settings. I think I got a filter to check just for members of jira-users but I have having a hard time getting the groups correct.