Authenticate via AD security groups

(Robin Shi) #1

Is it possible to authenticate the user via the AD security group after set up the LDAP bridge? Any limitation e.g. <1000 users in the group?

Hope the quesiton makes sense.

Thanks.

 

(David Schoen) #2

Yes you can use the LDAP Bridge to authenticate users based on AD security groups, but we're currently unable to expand "pages" that it sends back which does normally limit you to 1000 users per group - it's being worked on here https://squizmap.squiz.net/matrix/4030

(Robin Shi) #3

Thanks David, we are running 4.18.1, does it support AD groups authentication? How about the AD groups which nest AD groups?

(Robin Shi) #4

anyone has used AD group authentication here?

(Nic Hubbard) #5

anyone has used AD group authentication here?

 

We authenticate with AD, and the users are within AD groups. Is that what you mean?

(Robin Shi) #6

 

We authenticate with AD, and the users are within AD groups. Is that what you mean?

Yes, currently we use the user in the OU. It'll be great to authenticate via their AD security groups.

(Robin Shi) #7

Just give you guys an update. The LDAP group works well in Matrix.

But the domain user is the primary group, which doesn't have memberof applied, so we are not able to use this LDAP to authenticate all staffs.

all good. thanks guys.