Is it possible to map 2 groups AD?

[WebGreg]

Hi.

User filter:

(&(objectCategory=person)(objectClass=user)(memberOf=CN=SparkUsers,OU=forest,DC=org,DC=dc)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))

Works perfect. But I need to add second group. Is it possible?

[totzkotz]

Sure… LDAP Filter should look like this:

(&(objectCategory=person)(objectClass=user)(|(memberOf=“DN of Second Group”)(memberOf=CN=SparkUsers,OU=forest,DC=org,DC=dc))(!(userAccountControl:1.2.840.113556.1.4.803:=2)))

See LDAP filter syntax:
& = and
| = or

[speedy]

This is my preferred method.

How to Setup Authentication Groups with LDAP/AD

In this example I’ll be using the following: AD domain = AD-DOMAIN.local access group = Openfire Access Group roster groups = _IM Group1, _IM Group2 (*note - I’ll be using _IM as part of a wildcard search, so all my groups start with _IM for that reason) First create your security groups: Create a Domain Local Security Group. In our example call it Openfire Access Group. In this example, I’ve placed the group in the user container. Create regular security groups (usually Global). In t…

[WebGreg]

Thank you @totzkotz and @speedy. It works