Importing users and groups with LDAP import - F-Secure Community
<main> <article class="userContent"> <p> </p> Importing users and groups with LDAP import <p>This article describes how you can import users and groups with LDAP import. </p> <p>To import users and groups with LDAP import: </p> <ol><li> Set up an LDAP or FILE import profile from <strong>Groups and Users</strong> > <strong>Import/Auth Profiles</strong>. </li> <li> There's a profile available by default, click on it. <p><img src="https://us.v-cdn.net/6032052/uploads/377/CRXGJPOWCTDQ.png" height="101" width="648" alt="image" class="embedImage-img importedEmbed-img"></img></p> </li> <li> The below window opens. Select <strong>Advanced LDAP Options >></strong> to view all fields. Fill in the fields as necessary. <p><img src="https://us.v-cdn.net/6032052/uploads/719/DFWBWZFJGH7J.png" height="412" width="588" alt="image" class="embedImage-img importedEmbed-img"></img></p> <div> <div><table><colgroup><col></col><col></col></colgroup><thead><tr><th>Setting </th> <th>Value </th> </tr></thead><tbody><tr><td headers="d931e104">Host/IP Address </td> <td headers="d931e107">Active directory server </td> </tr><tr><td headers="d931e104">Base DN </td> <td headers="d931e107">A Distinguishable name for the AD scope. Example: DC=mc2008,DC=fi </td> </tr><tr><td headers="d931e104">Bind DN </td> <td headers="d931e107"> <p>The user whose credentials are used to access the AD. Use the User Principal Name (UPN), "internet-style name". </p> <p>Example: administrator@mc2008.fi </p> </td> </tr></tbody></table></div> </div> </li> <li> Go to the <strong>Advanced</strong> tab. The below window opens. Fill in the fields as necessary. <p><img src="https://us.v-cdn.net/6032052/uploads/372/AID4WZFNAECK.png" height="315" width="600" alt="image" class="embedImage-img importedEmbed-img"></img></p> <div> <div><table><colgroup><col></col><col></col></colgroup><thead><tr><th>Setting </th> <th>Value </th> </tr></thead><tbody><tr><td headers="d931e177">Filter </td> <td headers="d931e180">Active Directory Query Parameters TIP: (Example: mail=*mc2008.fi) </td> </tr><tr><td headers="d931e177">Map UID to Attribute </td> <td headers="d931e180">Unique Attribute in the LDAP Directory </td> </tr></tbody></table></div> </div> </li> </ol><div><h3 data-id="user-import-advanced-examples">User Import - Advanced examples</h3> <strong>Import one specific domain</strong> <pre class="code codeBlock" spellcheck="false">(mail=*<a href="https://fsecure.vanillacommunities.com/profile/mc2008" rel="nofollow">@mc2008</a>.fi)</pre> <strong>Exclude objects (NOT)</strong> <pre class="code codeBlock" spellcheck="false">(&(mail=*<a href="https://fsecure.vanillacommunities.com/profile/mc2008" rel="nofollow">@mc2008</a>.fi)(!(objectClass=group))) (&(mail=*<a href="https://fsecure.vanillacommunities.com/profile/mc2008" rel="nofollow">@mc2008</a>.fi)(!(description=noimport))) (&(mail=*)(!(UserAccountControl:1.2.840.113556.1.4.803:=2))) Ignore disabled users</pre> <strong>Use two attributes (AND)</strong> <pre class="code codeBlock" spellcheck="false">(&(mail=*)(sn=Mc2008))</pre> <strong>Use two attributes (OR)</strong> <pre class="code codeBlock" spellcheck="false">(|(sn=Mc2010)(sn=Mc2008))</pre> </div> <br> </article> </main>
