Limiting IM users in LDAP

Openfire Openfire Support
1

By default when you point to LDAP I see all the user accounts regardless of anything, is there a way to make it so I can only see users if I have enabled a group they are on? I don’t want to see an “all users” type list…

2

That would be a user filter based on a LDAP group. Enter something like this into the system property ldap.searchfilter: (&(objectClass=organizationalPerson)(memberOf=cn=WebISteam,ou=ChatGroups,ou=acc ounts,dc=domain,dc=com))

3

Thanks Todd. Does that imply that only those users will show up when they are a member of that group? and then I can use my other groups to further control where they are seen in the IM client? Or would I need multiple filters?

4

Or by being in a specific group they are removed from the generic listing of users?

5

yes, only members of that group will show in openfire. All the groups will still show in the openfire admin, and can be shared accordingly.