cancel
Showing results for 
Search instead for 
Did you mean: 

How to configure multiple OU in LDAP

hardik_thakkar
Star Contributor
Star Contributor

Hi Team,

I have configured LDAP with the below mentioned properties and its working fine.

authentication.chain=alfrescoNtlm1:alfrescoNtlm,ldap-ad1:ldap-ad
ldap.authentication.active=true
ldap.authentication.userNameFormat=%s@india.in

ldap.synchronization.groupQuery=objectclass\=group
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(modifyTimestamp<\={0})))

ldap.synchronization.personQuery=objectclass\=user
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(!(modifyTimestamp<\={0})))

ldap.synchronization.groupSearchBase=ou\=INDIA Users,dc\=INDIA,dc\=IN
ldap.synchronization.userSearchBase=ou\=INDIA Users,dc\=INDIA,dc\=IN

Now, i want to synchronize user whose OU is UK, USA etc. along with existing OU user.

Does it possible to sync user from different OU? if yes, what are the changes required?

Thanks,
Hardik

1 REPLY 1

openpj
Elite Collaborator
Elite Collaborator

You can configure two different properties file: one properties file for each OU:

https://docs.alfresco.com/5.2/tasks/auth-example-twoldap-ad.html

Another way could be complex LDAP queries in a unique properties file but it could be very tricky to do, it strongly depends on your LDAP tree structure and object types.