Google LDAP Limit to Group or OU #17325
-
|
Greetings, I have LDAP setup to use Google Workspace as per the following instructions: https://snipe-it.readme.io/docs/hosted-ldap-providers This works and shows the entire list of users. I instead want to only sync the users in the Students OU. This OU has many sub OUs, which is how we organize the students per year. Modifying the LDAP settings in Snipe-IT to only sync the students accounts has been challenging.
Any idea what I'm missing? So far the test sync only works if I leave the base DN as dc=example,dc=com and the following in the LDAP filter: &(cn=*)(objectClass=person) I am currently running Snipe-IT version 8.1.16 on prem. It is not an issue with LDAP on the server or any firewall rules, since it works with the base settings from the instructions. Thank you for your advice. |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments
-
|
Alright, I was finally able to figure it out! I had to keep the LDAP filter as shown in the instructions, but set the Base Bind DN to the following: ou=Students,ou=Users,dc=example,dc=com This revelation happened while I was looking through the Google LDAP audit logs and saw a successful bind from another application that also uses Google LDAP. That provided the clue that I needed. |
Beta Was this translation helpful? Give feedback.
-
|
Great news! I was just writing up a whole long response to what you wrote, but yours is much better. Thank you for sharing that with us! |
Beta Was this translation helpful? Give feedback.
Alright, I was finally able to figure it out! I had to keep the LDAP filter as shown in the instructions, but set the Base Bind DN to the following: ou=Students,ou=Users,dc=example,dc=com
This revelation happened while I was looking through the Google LDAP audit logs and saw a successful bind from another application that also uses Google LDAP. That provided the clue that I needed.