Authentication Using Multiple OUs

[edwardcj]

Hi. I’m testing a newly installed Openfire 4.4.1 on a Windows 10 and MySQL. Authentication is via AD. While it is now working as it should when configured with a specific OU, our AD users are located in different OUs. How can I configure Openfire to look at different OUs? I tried changing the base to the root of the AD but cannot authenticate anymore.
Thanks in advance for any help!

[speedy]

you’ll need to set your base dn to the root of your domain, and then use the search filters to target the OUs.

[edwardcj]

Thanks Speedy! I managed to change the base DN.
But how do I configure the search filter and where? Sorry I’m completely a basic noob.

[speedy]

I like to use group membership instead of ou, but you’ll need to build a ldap query to do what you like. you can use this as an example

How to Setup Authentication Groups with LDAP/AD

In this example I’ll be using the following: AD domain = AD-DOMAIN.local access group = Openfire Access Group roster groups = _IM Group1, _IM Group2 (*note - I’ll be using _IM as part of a wildcard search, so all my groups start with _IM for that reason) First create your security groups: Create a Domain Local Security Group. In our example call it Openfire Access Group. In this example, I’ve placed the group in the user container. Create regular security groups (usually Global). In t…