Skip to main content
Question

LDAP Mappings with AD on JSS

  • January 27, 2010
  • 4 replies
  • 22 views

Forum|alt.badge.img+12

Hello,

I'll most likely open a support ticket for this as all organizations are probably different.

We use Active Directory and I have yet to be able to add a group from AD and grant it access to the JSS. The problem I think is the "Map Member Users To" portion. I believe the attribute should be member, however when testing it never shows an account being a member of a group.

Any suggestions?

![external image link](attachments/3f1c746649654b19b8bc4e7c917d7364)

4 replies

talkingmoose
Forum|alt.badge.img+36
  • Community Manager
  • January 27, 2010

If it helps, our settings are practically identical to yours, except that
On 1/27/10 2:17 PM, "Edgar, Ken" <ken.edgar at gmail.com> wrote:
the "Map Member Users to" field is empty for us.

Our Search Base also includes "OU=Groups,". Include this in your Search
Base:

OU=Groups,DC=ad,DC=schoolspecialty,DC=com

--

William Smith
Technical Analyst
Merrill Communications LLC
(651) 632-1492


bentoms
Forum|alt.badge.img+35
  • Hall of Fame
  • January 27, 2010

I did this earlier..

Think I needed to tick used distinguished name & create a new LDAP that looked across the root of our domain.

Regards,

Ben.


Forum|alt.badge.img+12
  • Author
  • Contributor
  • January 27, 2010

William, looks like the map to users field is empty by default... but it didn't seem to work when I did the test if a user is a part of a group. Our groups are also all over the place in different OU's so I can't point to OU=Groups unfortunately.

Thank you


bentoms
Forum|alt.badge.img+35
  • Hall of Fame
  • January 27, 2010

Np.

Good thing it was fresh in my mind.

Regards,

Ben.