AD ldap multiple path synchronization

cancel
Showing results for 
Search instead for 
Did you mean: 
john2994
Active Member

AD ldap multiple path synchronization

Jump to solution

I have  this properties,

 

ldap.synchronization.userSearchBase=DC\=main,DC\=fip
ldap.synchronization.personQuery=(&(objectClass\=user)(memberOf\=CN\=Пользователи СЭД,OU\=Users,OU\=FIP,DC\=main,DC\=fip)(!(cn\=Guest))(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(memberOf\=CN\=Пользователи СЭД,OU\=Users,OU\=FIP,DC\=main,DC\=fip)(!(cn\=Guest))

and this AD tree structure

 

Безымянный.png

So far i have managed to sync users from AD to alfresco from last folder "Users", but now i need to sync users from both "Users" folder and "Labs". What do i need to change in properies in order to manage that? Thanks in advance.

1 Solution

Accepted Solutions
sufo
Established Member II

Re: AD ldap multiple path synchronization

Jump to solution

You have to use OR operator "|" in ldap search string:

ldap.synchronization.userSearchBase=DC\=main,DC\=fip
ldap.synchronization.personQuery=(&(objectClass\=user)(|(memberOf\=CN\=Пользователи СЭД,OU\=Users,OU\=FIP,DC\=main,DC\=fip)(memberOf\=CN\=Пользователи СЭД,OU\=Labs,OU\=FIP,DC\=main,DC\=fip))(!(cn\=Guest))(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(|(memberOf\=CN\=Пользователи СЭД,OU\=Users,OU\=FIP,DC\=main,DC\=fip)(memberOf\=CN\=Пользователи СЭД,OU\=Labs,OU\=FIP,DC\=main,DC\=fip))(!(cn\=Guest))

 

 

View solution in original post

1 Reply
sufo
Established Member II

Re: AD ldap multiple path synchronization

Jump to solution

You have to use OR operator "|" in ldap search string:

ldap.synchronization.userSearchBase=DC\=main,DC\=fip
ldap.synchronization.personQuery=(&(objectClass\=user)(|(memberOf\=CN\=Пользователи СЭД,OU\=Users,OU\=FIP,DC\=main,DC\=fip)(memberOf\=CN\=Пользователи СЭД,OU\=Labs,OU\=FIP,DC\=main,DC\=fip))(!(cn\=Guest))(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(|(memberOf\=CN\=Пользователи СЭД,OU\=Users,OU\=FIP,DC\=main,DC\=fip)(memberOf\=CN\=Пользователи СЭД,OU\=Labs,OU\=FIP,DC\=main,DC\=fip))(!(cn\=Guest))