Jabber AD LDAP Filtering Question....

[VLT06]

Hi Guys,

Has anyone faced the issue or come up with a solution regarding the LDAP to AD for user search for people that have more then one account….

Example would be that Bob Down has two accounts in AD 1 for normal day to day user & second one for administrator that he only uses once in a while. When doing a look up in jabber, he appears twice.

Is there any way to intervene to filter the search to only lookup normal user accounts and not pull administrator/test accounts???

[Roger Kallberg]

This is the settings we use for this.

The filter is set as per what I answered in my previous reply.

[Yarin Ezra]

Amazing thank you !

[Prasanth C.R.]

Hi,

I have a scenario where multiple customer's users use same CUCM and the users should not list users from other OU's. 

For example, we have OU's ent1, ent2 and ent3 in domain cisco.com

user1@ent1.cisco.com, user2@ent1.cisco.com

user3@ent2.cisco.com, user4@ent2.cisco.com

user5@ent3.cisco.com, user6@ent3.cisco.com

I configured the jabber-config.xml file to omit the users from ent2 OU alone using below configuration.

<Directory>
  <DirectoryServerType>EDI</DirectoryServerType>
  <ConnectionType>1</ConnectionType>
  <PrimaryServerName>10.4.252.25</PrimaryServerName>
  <UseWindowsCredentials>0</UseWindowsCredentials>
  <UseSecureConnection>1</UseSecureConnection>
  <SearchBase1>ou=ENT1,ou=master,dc=sharedAD,dc=com</SearchBase1>
  <UserAccountName>uid</UserAccountName>
  <BaseFilter>(&amp;(objectCategory=person)(!(UserAccountControl:1.2.840.113556.1.4.803:=2))(!(mail=*ent2*)))</BaseFilter>
  <PredictiveSearchFilter>uid</PredictiveSearchFilter>
</Directory>

Can someone give pointers how to modify this xml file to filter users from its own OU

- Prasanth R