Openfire 4.8.0 Mapeo de grupos Active Directory

[Dave47]

Hola a todos.

Estoy tratando de configurar los grupos que tengo en mi AD a openfire pero hasta ahora no he podido, he visto varias maneras de configurarlo pero todos han sido en versiones anteriores estoy usando la openfire 4.8.0

La configuración que he usado básicamente son variantes de:

(&(objectClass=group)(memberOf=((CN=Brasil)(CN=Colombia)(CN=Corporativo)(CN=CostaRica)(CN=Ecuador)(CN=Espana)(CN=Mexico)(CN=Peru)(CN=Uruguay)(CN=Panama))

[speedy]

Here is how I used to do groups and seach filters. perhaps you’ll find it helpful

How to Setup Authentication Groups with LDAP/AD

In this example I’ll be using the following: AD domain = AD-DOMAIN.local access group = Openfire Access Group roster groups = _IM Group1, _IM Group2 (*note - I’ll be using _IM as part of a wildcard search, so all my groups start with _IM for that reason) First create your security groups: Create a Domain Local Security Group. In our example call it Openfire Access Group. In this example, I’ve placed the group in the user container. Create regular security groups (usually Global). In t…

[Dave47]

Hi speedy,

Thanks to reply, i review the information and run test.

[Dave47]

=( Not work @speedy

[speedy]

should work.
can you post what you have for

ldap.baseDN = 
ldap.groupSearchFilter = 
ldap.searchfilter =

[Dave47]

@speedy

ldap.baseDN =
ldap.groupSearchFilter =
ldap.searchfilter =

Hello Speedy

Thaks, yes mi date is

ldap.baseDN=CN=Users,DC=fidelitymkt,DC=local
ldap.searchfilter = (void)
ldap.groupSearchFilter =(&(objectCategory=Group)(memberOf=OU=Paises,OU=Grupos,OU=Fidelity,DC=fidelitymkt,DC=local))

[Dave47]

hi,

apologies, by mistake I sent the user, but for the groups I’m using

filter group:

(&(objectCategory=Group)(memberOf=OU=Paises,OU=Grupos,OU=Fidelity,DC=fidelitymkt,DC=local))

[speedy]

@Dave47

ldap.baseDN

your filters are not correct
try

ldap.baseDN=DC=fidelitymkt,DC=local
ldap.groupSearchFilter=(objectCategory=Group)

I don’t think openfire can filter based on OU, so you’d then need to filter based on group membership.

[Dave47]

@speedy

(objectCategory=Group)

Hi.

configure as indicated and it did not bring me the groups that already exist in the AD, my OU is called Groups → Countries (Colombia, Mexico, Panama, Costa Rica, etc).

[Dave47]

Speedy

Thanks for all the help, I did not understand at first but analyzing already saw that it is from the beginning and the default parameters brought me both users and groups of my AD.

Regards