LDAP filter users

[paulweb]

How to?
steps
1. we have in AD following group alfrescoUsers
2. user p.web is member this group and user k.nett is not member this group
3. in our AD we not use uid and cn is following kind Иван Иванович Иванов,therefore use DN in quality ldap.authentication.userNameFormat does not approach
4. and we use upn %[email protected]
5. Question: How to put the filter that alfresco started up the user p.web entering into group alfrescoUsers, and k.nett did not start up?

P.S:I am able to do it through a code, but can have a variant through customisations

and request dward look this post http://forums.alfresco.com/en/viewtopic.php?f=9&t=21423

[paulweb]

Solution has appeared simple :
steps
1.set ldap.synchronization.active=true
2. set ldap.synchronization.personQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(memberOf\=CN=alfrescoUsers,CN=Users,DC=royal-bank,DC=ru))
3. in default-synchronization.properties set next
synchronization.syncWhenMissingPeopleLogIn=true
synchronization.autoCreatePeopleOnLogin=false
4. and run alfresco

and all earn p.web enter in alfresco and k.nett not enter in alfresco

but(Damned but)
i found bug
steps alfresco sync
1. adding users
2. adding groups and if have member adding user in this groups
but if member =k.nett (short variant) and k.net has not been added in alfresco,because ldap.synchronization.personQuery, alfresco have given error

user k.nett not adding in group xxxxx (sync break)

P.S:In Alfresco without a beer  bottle not to understand, and as I do not drink, to have to sit in a forum :lol: