LDAP Config on VSOM

jwood.ok · ‎09-02-2016

We haven't previously used LDAP configuration on VSOM, but I worked on getting it working yesterday.

We are on 7.5.1 right now (possibly updating later in the year), but I wasn't real crazy by the implementation. The reason is this:

I have my users divided up by group and those groups can only access one location; however, it looks like the way LDAP is done, everyone from one LDAP server has to be in the same group.

The only way I can see around this is making a different "LDAP Server" listing for each location and splitting these up into various groups...but that kind of stinks because then they will all have to choose a different dropdown selection when logging in.

Is this how it is even in the newer versions? In other software I've seen, essentially what happens is that you allow an LDAP connection which maps to a local user which you can put into any group, but VSOM doesn't seem to be set up that way.

SteveM · ‎09-02-2016

Hi John,

We are on 7.8 so not sure about 7.5.1

And we have Active Directory

Add user group filters to filter the LDAP group the user is in.

Search path something like DC=company,DC=local

Group Filter something like

(&(objectClass=user)(sAMAccountName=%USERID%)(memberof=CN=CCTV-Operators,OU=CCTV Groups,OU=Groups,DC=company,DC=local))

Then in your normal VSOM user group add the LDAP server search filter (Under LDAP Server)

Hope this helps?

If you want more info let me know.

Cheers,

Steve

jwood.ok · ‎09-02-2016

Steve,

I have filtering in place. My issue is that once they are on VSOM, I'd like to make use of the VSOM groups with the ldap users, but it doesn't seem there is a way to do this. The Ldap server goes into one group. As I said, the only alternative I can think of is to make, for instance, 5 AD groups and 5 ldap servers with different filtering options that isolate each of those AD groups so they can be split into 5 VSOM groups.

SteveM · ‎09-02-2016

Hi John,

You should only need 1 LDAP server with 5 User Group Filters.

See attached ctv1.jpg.

Then cctv2.jpg map the VSOM user group to the LDAP Server Filter

Cheers,

Steve

jwood.ok · ‎09-02-2016

Ahhh well, your information is well taken and on point...but 7.5.1 doesn't have the same screens or "group filter" as your version. I'll investigate more to see if it is possible.