Identity Server using Active Directory with Multiple OUs?
Trying to set up Essentials Security to use multiple OUs in the connectionStrings.config file for the Identity Server using Active Directory (or alternately Windows Integrated) but can't figure out a way to make it work. Any suggestions? Is this even possible?
i.e. connectionString="LDAP://myADServer/ou=Users1,ou=Users2,dc=domainName"
or
connectionString="LDAP://myADServer/ou=Users1,dc=domainName"
connectionString="LDAP://myADServer/ou=Users2,dc=domainName"
0
-
I Aron,
You've already passed the problem ?0 -
Hello Aron,
I spoke with our Support team and they mentioned that this is not possible through LDAP, as you are only able to use a single LDAP address for the query (see http://stackoverflow.com/questions/9184978/ldap-root-query-syntax-to-search-more-than-one-specific-ou). You could create logical unions within the LDAP address, though this is an advanced setup.
It may be possible to achieve this through IWA through using the 'Searchers' tag within the Security.xml file. If you are still having issues with this configuration, please contact Geocortex Support for assistance.
Thanks, Stefan0 -
Thanks for looking into this Stefan, I'll look into the 'Searchers' tag approach. At the moment, I do have what I need using IWA and Windows Groups. We ended up creating new groups and then administered based on the group. 0
Please sign in to leave a comment.
Comments
3 comments