groupFilter setup in ldap_login.conf | Community
Skip to main content
artron
Level 2
October 16, 2015
Solved

groupFilter setup in ldap_login.conf

  • October 16, 2015
  • 2 replies
  • 861 views

Hello,

We have a groupFilter in our Author instance currently configured as such:

groupFilter="(&(objectclass=group)(cn=wcm*))"

How may we change the filter to add the following groups?

ITEmployeesOnly

DRRCorporateEmployees

I tried the following configuration and it did not work.

groupFilter="(&(objectclass=group)(cn=wcm*))(&(objectclass=group)(cn=ITEmployeesOnly))(&(objectclass=group)(cn=DRRCorporateEmployees))"

Any suggestions?

Thanks,

Artron

AEM version 5.6

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Sham_HC

use condition like [1] or [2]. Familiarize yourself with ldap syntax will help.  

[1]

groupFilter="(&(objectclass=group)(|(cn=wcm*)(cn=ITEmployeesOnly)(cn=DRRCorporateEmployees)))"

[2]

groupFilter="(&(objectclass=group)(&(cn=wcm*)(cn=ITEmployeesOnly)(cn=DRRCorporateEmployees)))"

2 replies

Sham_HC
Sham_HCAccepted solution
Level 10
October 16, 2015

use condition like [1] or [2]. Familiarize yourself with ldap syntax will help.  

[1]

groupFilter="(&(objectclass=group)(|(cn=wcm*)(cn=ITEmployeesOnly)(cn=DRRCorporateEmployees)))"

[2]

groupFilter="(&(objectclass=group)(&(cn=wcm*)(cn=ITEmployeesOnly)(cn=DRRCorporateEmployees)))"

artron
artronAuthor
Level 2
October 16, 2015

Thanks Sham! I tried it out and had to roll back as apparently those two groups contain other groups which do not meet the above criteria. It's going to require a little more work on my part to figure this out. Your quick reply is greatly appreciated and nudge toward LDAP syntax was needed. Also, enjoyed perusing your blog. Very nice!