Limiting LDAP Users by Group

To limit the LDAP authentication realm users by a specific group, you must use the LDAP filter as follows:

  1. In Administration > Security > Authentication (Users), create or edit an LDAP authentication realm.
  2. In the User Search Filter field, specify the name of the group you want to use as a restriction.

    For example:

    (&(memberOf=CN=automation,OU=LDAPTest Groups,DC=ldaptest,DC=net)(sAMAccountName={0}))

    The first condition here, (memberOf=CN=automation,OU=LDAPTest Groups,DC=ldaptest,DC=net), limits the LDAP authentication realm to only the users belonging to the automation group.