Filter Active Directory Groups

Hello all,

here is my setup (names replaced to protect the innocent)

base dn :dc=local, dc=dc=localdomain,dc=com

using this pulls up all of my groups and users and works just fine.

now we are wanting to get the enterprise version and currently have over 1100 active user accounts and not all of those are going to be using the service. so we are trying to create groups to filter out what we want, attempts made like below:

ou=openfire groups, ou=distribution groups, dc=local, dc=localdomain, dc=com

and inside the openfire groups we have chat_HR and chat_IT.

we want to be able to filter down to ou=openfire groups, ou=distribution groups, dc=local, dc=localdomain, dc=com

so that only groups listed in there and its members are able to login to the openfire server.

any help would be greatly appreciated so we can start purchasing enterprise licenses.

now I only get users that are in either of the specifed groups and then the only groups I get start with chat*

answered my own question, an edited version of my xml is below:

@DOMAIN.NAME




















]]>

displayName

mail

cn

member

description

false

(objectClass=group)(cn=chat*)