Openfire and ldap search filter

[ilyaHlevnoy]

Hey.
I have an LDAP filter so that Openfire only syncs Spark users.
(&(objectClass=organizationalPerson)(memberOf:1.2.840.113556.1.4.1941:=CN=IM,OU=Openfire,OU=groups,OU=users,DC=domain,DC=local))
But recently I wanted Openfire to exclude disabled accounts.
(&(objectClass=organizationalPerson)(memberOf:1.2.840.113556.1.4.1941:=CN=IM,OU=Openfire,OU=groups,OU=users,DC=domain,DC=local)(!userAccountControl:1.2.840.113556.1.4.803:=2))
This should work, but for some reason Openfire threw me out after this change,nobody can connect to the server and to the administration panel, I had to change the table value through mysql and restart the service.

here is sql query, suddenly it will be useful to someone.

UPDATE ofProperty 
SET propValue = '(&(objectClass=organizationalPerson)(memberOf:1.2.840.113556.1.4.1941:=CN=IM,OU=Openfire,OU=groups,OU=users,DC=domain,DC=local))' 
WHERE name like 'ldap.searchFilter';

[speedy]

syntax is slightly wrong.

How to Setup Authentication Groups with LDAP/AD

In this example I’ll be using the following: AD domain = AD-DOMAIN.local access group = Openfire Access Group roster groups = _IM Group1, _IM Group2 (*note - I’ll be using _IM as part of a wildcard search, so all my groups start with _IM for that reason) First create your security groups: Create a Domain Local Security Group. In our example call it Openfire Access Group. In this example, I’ve placed the group in the user container. Create regular security groups (usually Global). In t…

[ilyaHlevnoy]

you are awesome!
thank you!)