AD group restrictions

Ask questions about your setup or get help installing ZCS server (ZD section below).
Posts: 1
Joined: Wed Apr 22, 2015 8:46 pm

AD group restrictions

Postby bradlanham » Wed Apr 22, 2015 8:55 pm

Hi, I would like some advise on configuring the 'zimbraExternalGroupLdapSearchBase' and 'zimbraExternalGroupLdapSearchFilter' attributes. I have configured external AD authentication and it is working as expected. I would however further like to restrict users to a particular AD group and I assume these attributes are involved. I have tried populating the fields with values but they do not seem to have any effect. In fact I can enter 'Mary has a little lamb' and do not receive any warnings or change in authentication behaviour. Users not in that group are able to authenticate regardless. Thanks for your help.

User avatar
Advanced member
Advanced member
Posts: 175
Joined: Fri Mar 07, 2014 1:05 pm
Location: Switzerland
ZCS/ZD Version: Release 9.0.0.GA.3924.UBUNTU18.64 U

Re: AD group restrictions

Postby oetiker » Wed May 15, 2019 12:26 pm


Did you find the right syntax?

Posts: 34
Joined: Sat Sep 13, 2014 2:15 am

Re: AD group restrictions

Postby Jordack » Sun May 19, 2019 10:48 pm

Maybe something like:

zimbraExternalGroupLdapSearchBase: OU=MyUsers,DC=network,DC=domain,DC=org
zimbraExternalGroupLdapSearchFilter: (&(objectClass=organizationalPerson)(memberOf=CN=Application Users - Zimbra,OU=Software Access,OU=Groups,OU=MyUsers,DC=network,DC=domain,DC=org))

Return to “Installation and Upgrade”

Who is online

Users browsing this forum: No registered users and 8 guests