I try to use external Ldap server like Active Directory to authenticate web user.I’ve created a Directory assistance database whit the correct parameter except the custom filter to use.
I try to use this in the custom filter field:
(|(cn=%*)(|(&(sn=%a)(givenname=%z))(&(sn=%z)(givenname=%a))))
but it doesn’t work!
there is a document that explain how to configure this scenario?
Subject: Ldap web authentication filter with Active Directory
I tried custom filters with AD but the AD option provided is the only one that we’ve found to work reliably. We’re using distinguishedName in ACLs. Active Directory distinguished names are a pain because they look awful and more often than not you can’t work out who they refer to since they use the Windows login as the name component. I’d strongly recommend using a different LDAP field if that’s an option for you.
I’ve written a bit about this here in another thread, probably 5 or 6 weeks ago.
Subject: RE: Ldap web authentication filter with Active Directory
I find the solution:Use custom filter with this: (sAMAccountName=%*)
Use “attribute to be used as Notes…” :sAMAccountName
Put in ACLs the sAMAccountName ex:for John Smith → “JSmith” with the desired access.
This solution work fine for me.