Yet another LDAP thread

Yes, another thread about getting things working with Active Directory. I’ve spent the past few days going over documentation, reading up on Active Directory, trying various things, and reading tons and tons of forum posts about these issues, but still I have problems.

Running on Windows SBS2003, AD is using all kinds of default settings (as in all of them, with the exception of added groups and users, obviously).

I have the following settings:

Base DN

OU=SBSUsers,OU=Users,OU=MyBusiness,DC=,DC=local

User filter:

(&(objectCategory=person)(objectClass=user)(!(userAccountControl:1.2.840.113556. 1.4.803:=2)))

This works, as the test button only returns actual users (not user templates) and only non-disabled accounts.

The problem occurs when I get to the group setting page.

I’ve created a security group called Openfire and placed all of the users into this group (we have about 30 employees, so that’s how many entries we’re working with, minus the disabled accounts).

I can’t seem to get it to NOT give me an error about no groups being found. I’ve tried adding groups to both the base dn and the user filter (which I felt didn’t make sense, but it was worth a shot, right?)

I feel like I’m missing something, perhaps something obvious, but it seems like it doesn’t matter what I put in group filter, I always get

No groups were found using the specified configuration. Try changing the base DN,group filter or member field.

What am I doing wrong?

Openfire 3.6.4 on Windows Small Business Server 2003

You can set your base dn to “DC=yourdomain,DC=com” to get all the groups listed for the entire domain. Use SearchFilter “(objectClass=group)”.

Here’s what I’ve got as of quitting time (5PM) Friday. I’m sure someone will see what I’ve done here and say “Oh, you fool, what are you even doing,” but…

So I changed the base DN settings as suggested, and moved some things around.

Base DN is now:

DC=,DC=local

User filter is now:

(&(objectCategory=person)(objectClass=user)(memberOf=CN=Openfire,OU=Security Groups,OU=MyBusiness,DC=,DC=local)(!(userAccountControl:1.2.840.113556. 1.4.803:=2)))

This seems to be working! I only see the users that are active and in the group I am looking for… next step!

Group filter:

(&(objectClass=group)(cn=Openfire))

Testing shows 34 users in the group Openfire, about the number I expect.

But now things go horribly wrong. I hit save and continue… (I was getting http error 500, but restarting the openfire service solved this)

Does the above look correct? It seems to be functioning, but I’m no expert.

Message was edited by: tyam Update, and solution.