Can I use LDAP (AD) groups for membership to Members-only Chat Rooms?

I am testing a new install of Openfire and have LDAP authentication working and would like to create Members-only Chat Rooms with User Permissions granted by Group membership in Active Directory. The User Permissions page lets me put the group in the Room Members but when a user in the group tries to join the chat room it says it doesn’t have permission. Is this supported? Can it be done?

No, you can’t configure that. What you can do I install the packet filtering plug-in and create a rules that translate to only your LDAP group can send and receive packets to a specific MUC.

Membership permissions are based on users not groups, because it requires the JID not the AD username.

I know this is an old post… but has anyone done this that could provide some examples of what this looks like?