CirrusHi, I'm searching for mapping client group as I found to map teh clinet user but for group nothing worked with me, as below @ LDAP Query, i want to replace group limited_users with dynamic parameter:
SearchDN: dc=ldap,dc=test
SearchFilter: (distinguishedName=cn=%{session.logon.last.username},ou=limited_users,dc=ldap,dc=test)
Cirrusit worked after combining between two expressions as below:
"(|(distinguishedName=cn=%{session.logon.last.username},ou=limited_users,dc=ldap,dc=test)(distinguishedName=cn=%{session.logon.last.username},cn=users,dc=ldap,dc=test))"
ldapsearch -x -H 'ldap://192.168.1.1' -b "dc=ldap,dc=test" -s sub -D "administrator@ldap.test" -W "(|(distinguishedName=cn=%{session.logon.last.username},ou=limited_users,dc=ldap,dc=test)(distinguishedName=cn=%{session.logon.last.username},cn=users,dc=ldap,dc=test))"