LDAP Resolver and AD User Groups

[AAuer]

Hi,
getting AD Users in a specific OU is working fast and reliable. How can privacyIdea get users from an ActiveDirectory Group?
I tried the following:

• group as Base-DN: no error, no users
• root-OU as Base-DN, filter (memberOf=“CN-of-Group”): no error, no users

What do I do wrong?

Thanks in advance
Andreas

[henry]

This worked for me

LDAP and OTP issue

Hello @alxmijares welcome to privacyIDEA and this forum, which is supposed to be a place where privacyIDEA users can help each other based on their experience. Unfortunately you provide nearly no information! Sometimes if you describe your problem, what you are doing and what you want to achieve, you might get the right idea yourself! Thanks for being more specific!

[AAuer]

Unfortunately my users are in a Group not in an OU…

[cornelinux]

You need to improve your LDAP skills.

The filter with memberOf needs to complete DN of the group. This is LDAP and is nothing privacyIDEA specific.

[AAuer]

LDAP works correct, but the AD-Admin forgot to grant the correct rights. Now its working!