AD group restrictions

Ask questions about your setup or get help installing ZCS server (ZD section below).
bradlanham
Posts: 1
Joined: Wed Apr 22, 2015 8:46 pm

AD group restrictions

Postby bradlanham » Wed Apr 22, 2015 8:55 pm

Hi, I would like some advise on configuring the 'zimbraExternalGroupLdapSearchBase' and 'zimbraExternalGroupLdapSearchFilter' attributes. I have configured external AD authentication and it is working as expected. I would however further like to restrict users to a particular AD group and I assume these attributes are involved. I have tried populating the fields with values but they do not seem to have any effect. In fact I can enter 'Mary has a little lamb' and do not receive any warnings or change in authentication behaviour. Users not in that group are able to authenticate regardless. Thanks for your help.



User avatar
oetiker
Advanced member
Advanced member
Posts: 160
Joined: Fri Mar 07, 2014 1:05 pm
Location: Switzerland
ZCS/ZD Version: Release 8.8.12.GA.3794.UBUNTU16.64
Contact:

Re: AD group restrictions

Postby oetiker » Wed May 15, 2019 12:26 pm

Hi

Did you find the right syntax?

Manuel
Jordack
Posts: 28
Joined: Sat Sep 13, 2014 2:15 am

Re: AD group restrictions

Postby Jordack » Sun May 19, 2019 10:48 pm

Maybe something like:

zimbraExternalGroupLdapSearchBase: OU=MyUsers,DC=network,DC=domain,DC=org
zimbraExternalGroupLdapSearchFilter: (&(objectClass=organizationalPerson)(memberOf=CN=Application Users - Zimbra,OU=Software Access,OU=Groups,OU=MyUsers,DC=network,DC=domain,DC=org))

Return to “Installation and Upgrade”

Who is online

Users browsing this forum: No registered users and 5 guests