LDAP Group Filter

Introduction

The valve is used to filter out values commonly (but not exclusively) from the memberOf attribute.

Configuration

Note

Valve name: LDAPGroupFilter | LDAPMemberOfFilter

Properties

Name	Description	Default	Mandatory	Expanded
prefix	Prefix for the filtered values	N/A
separator	Separator for the filtered values	","
groups_to_add	Array of groups to filter in (add). Supports wildcard * as prefix, suffix or both. Example: XYZ* includes all groups starting with 'XYZ'.	N/A
src_attribute	Group source attribute.	"memberOf"
dest_attribute	Filtered groups destination attribute.	"groups"
samaccountname_attribute	If sAMAccountName should be used instead of naming attribute.	N/A
use_dn	If group DN should be used instead of naming attribute.	false

Example

{
  "name" : "LDAPGroupFilter",
  "config" : {
    "prefix" : "GROUPS:",
    "separator" : ",",
    "groups_to_add" : ["Users*","*ompu*","*users"],
    "src_attribute" : "memberOf",
    "dest_attribute" : "groups",
    "use_dn" : false
  }
}