留言板

Filter on users importing from LDAP/AD

thumbnail
Valdecir Reghini,修改在12 年前。

Filter on users importing from LDAP/AD

New Member 帖子: 18 加入日期: 12-1-11 最近的帖子
Hi,

I am trying to make a filter on users importation from AD. My AD configurations is below:

br
    com
        company
            sub-company  1
                Users
                Inactive Users
                computers
            sub-company 2
                Users
                Inactive Users
                computers
            sub-company 3
                Users
                Inactive Users
                computers


On importation´s configuration from AD/LDAP, in field "Base DN" I put dc=company, dc=com, dc=br.
The importation is sucessfully , but I have 2 situations:

1. All users are imported to the table user_ , including the "Inactives Users".

2. The registries from AD that doesn´t have e-mail, for example, "Computers" are not imported, creating a huge register on log.

Questions:
I would like to import only the register that are below the level "Users", from all sub-companies, excluding the other levels (Inactive Users and computers).
.
I tried the operatos "&" e "|" making the union of "companies" and "users"
For Example:
(&(OU=Users) (| (OU=sub-company 1) (OU=sub-company2))), dc=company, dc=com, dc=br

Is it possible to do this filter ?

tks
valdecir.
thumbnail
Ricardo Funke Ormieres,修改在12 年前。

RE: Filter on users importing from LDAP/AD

New Member 帖子: 3 加入日期: 10-5-1 最近的帖子
You mean in the "Base DN" field?

I don't think so.

I would try this, in the "Import Search Filter" field instead:

(OU=Users)

or

(&(objectCategory=person)(sAMAccountName=@user_id@)(OU=Users))

or

(&(objectCategory=person)(sAMAccountName=@user_id@)(OU=Users)(!(OU=Inactive Users)(OU=computers)))

Think the first and the second are best, but you have to try...

Hope it helps! ;)
thumbnail
Valdecir Reghini,修改在12 年前。

RE: Filter on users importing from LDAP/AD (答复)

New Member 帖子: 18 加入日期: 12-1-11 最近的帖子
Ricardo,

Perfect;

tks;
Valdecir