search for: groups_dn

...members of a particular AD group, and any user that isn?t in that group, simply will not be found in the LDAP directory. For example if the user 'rowland' was searched for using this LDAP filter "(&(objectCategory=person)(objectClass=user)(sAMAccountName=rowland)(memberOf='GROUPS_DN'))" The user would only be found if it was a member of the required group Rowland

...y user that isn?t in that >> group, simply will not be found in the LDAP directory. >> >> For example if the user 'rowland' was searched for using this LDAP >> filter >> "(&(objectCategory=person)(objectClass=user)(sAMAccountName=rowland)(memberOf='GROUPS_DN'))" >> >> The user would only be found if it was a member of the required group >> >> Rowland > > I greatly apologize from being obtuse, but I do not see what I'm > missing.? From what I'm reading I should be setting the following: > > Base D...

...ar AD group, and any user that isn?t in that > group, simply will not be found in the LDAP directory. > > For example if the user 'rowland' was searched for using this LDAP > filter > "(&(objectCategory=person)(objectClass=user)(sAMAccountName=rowland)(memberOf='GROUPS_DN'))" > The user would only be found if it was a member of the required group > > Rowland I greatly apologize from being obtuse, but I do not see what I'm missing. From what I'm reading I should be setting the following: Base DN: DC=internal,DC=external,DC=com Auth. Cont...

> This is just another user like anyone else in the office. No, its offcourse not .. Why do you think you binding user is failing ;-) So, on the bind fail. Did you set on the "binding" user, : account is trusted and cant not be delegated? Password can be changed and never expire need to be ticked also. Whats set on the Pfsence server in ldap.conf ? Is BASE and URI defined? As