How to write an LDAP filter to check group membership
Ram-Apr 4 2011 — edited Apr 6 2011Hello,
I need to write a LDAP filter (rule) to allow access to a certain resource only for members of certain groups.
I tried using:
ldap:///(&(objectClass=inetorgperson)(memberOf=CN=XXXXX,CN=internal,CN=Groups,DC=YYYYYY,DC=COM))
It doesn't seem to work.
When I try using the Access Tester I get Rule: <not found> and Authorized: Inconclusive.
What is the right syntax to use? The object class i'm using for Persons is inetorgperson.
Thank you.