Synchronization AD

[llg]

Hi,

  how can we configure ldap synchronization when the group is a user's attribute.

dn : cn=user,ou=person, BASEDN
department : MYGROUP
…


I set,
ldap.synchronization.personQuery=(ObjectClass=person)
ldap.synchronization.groupQuery=(ObjectClass=person)
ldap.synchronization.userIdAttributeName=cn
ldap.synchronization.groupIdAttributeName=department

Users and groups are correctly imported, but groups are empty.
I can't fill ldap.synchronization.groupMemberAttributeName=member because my directory not implement RBAC model

Thanks

llg

[jasonm]

Are you using ldap or ldap-ad in the auth chain? the ldap-ad i think will make this work for you, it did for me initially