LDAP: Users and roles

[mvlach]

Hi,
I would like to solve my problem with user login. I need to accept only users in special group. Lets imagine, that in AD exists users with no alfresco group and I would like to disable log in alfresco.

When I import users from the AD I would like to say: only the users with the group ALF_READERS can login to the alfresco.

OR
I would like to import only the users with group ALF_READERS and others…

Thanks Mila

[rgouyet]

You cann add a LDAP query in the /alfresco/tomcat/shared/classes/alfresco/extension/ldap-authentication-context.xml  file:

 <property name="groupQuery">

            <!– 
               <value>(objectclass=group)</value> 
             –>
            <value><![CDATA[(&(objectclass=group)(memberOf=CN=ALF_READERS,CN=ZZZZZ,DC=XXXX,DC=YYYYYY,DC=com))]]></value>

        </property>
‍‍‍‍‍‍‍‍‍