09-02-2016 08:23 AM
We haven't previously used LDAP configuration on VSOM, but I worked on getting it working yesterday.
We are on 7.5.1 right now (possibly updating later in the year), but I wasn't real crazy by the implementation. The reason is this:
I have my users divided up by group and those groups can only access one location; however, it looks like the way LDAP is done, everyone from one LDAP server has to be in the same group.
The only way I can see around this is making a different "LDAP Server" listing for each location and splitting these up into various groups...but that kind of stinks because then they will all have to choose a different dropdown selection when logging in.
Is this how it is even in the newer versions? In other software I've seen, essentially what happens is that you allow an LDAP connection which maps to a local user which you can put into any group, but VSOM doesn't seem to be set up that way.
09-02-2016 09:17 AM
Hi John,
We are on 7.8 so not sure about 7.5.1
And we have Active Directory
Add user group filters to filter the LDAP group the user is in.
Search path something like DC=company,DC=local
Group Filter something like
(&(objectClass=user)(sAMAccountName=%USERID%)(memberof=CN=CCTV-Operators,OU=CCTV Groups,OU=Groups,DC=company,DC=local))
Then in your normal VSOM user group add the LDAP server search filter (Under LDAP Server)
Hope this helps?
If you want more info let me know.
Cheers,
Steve
09-02-2016 09:19 AM
Steve,
I have filtering in place. My issue is that once they are on VSOM, I'd like to make use of the VSOM groups with the ldap users, but it doesn't seem there is a way to do this. The Ldap server goes into one group. As I said, the only alternative I can think of is to make, for instance, 5 AD groups and 5 ldap servers with different filtering options that isolate each of those AD groups so they can be split into 5 VSOM groups.
09-02-2016 09:30 AM
09-02-2016 02:21 PM
Ahhh well, your information is well taken and on point...but 7.5.1 doesn't have the same screens or "group filter" as your version. I'll investigate more to see if it is possible.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide