Forum Discussion

refra_151287's avatar
refra_151287
Icon for Cirrus rankCirrus
Feb 07, 2016

Q: mapping LDAP user group

Hi, I'm searching for mapping client group as I found to map teh clinet user but for group nothing worked with me, as below @ LDAP Query, i want to replace group limited_users with dynamic parameter:

SearchDN:   dc=ldap,dc=test
SearchFilter:   (distinguishedName=cn=%{session.logon.last.username},ou=limited_users,dc=ldap,dc=test)
application delivery
BIG-IP Access Policy Manager (APM)
ldap query
  • refra_151287's avatar
    refra_151287
    Icon for Cirrus rankCirrus
    Feb 13, 2016

    it worked after combining between two expressions as below:

    "(|(distinguishedName=cn=%{session.logon.last.username},ou=limited_users,dc=ldap,dc=test)(distinguishedName=cn=%{session.logon.last.username},cn=users,dc=ldap,dc=test))"


ldapsearch -x -H 'ldap://192.168.1.1' -b "dc=ldap,dc=test" -s sub -D "administrator@ldap.test" -W "(|(distinguishedName=cn=%{session.logon.last.username},ou=limited_users,dc=ldap,dc=test)(distinguishedName=cn=%{session.logon.last.username},cn=users,dc=ldap,dc=test))"