KB Article #101328
Filtering LDAP users based on group membership
Question
I am using LDAP to authenticate my users for File Transfer Direct, but I only want specific groups to be able to log in and send packages. Can I filter the logins by Active Directory group?
Answer
As of version 1.5 this is not a part of the design of FTDirect, but the following workaround should work.
NOTE: this workaround may not work in later versions of FTDirect, and it may not work if you are using Single Sign On (SSO). This is not a feature and is not officially supported.
In the FTDirect admin interface, go to:
Administration (tab) --> LDAP Directories --> add/edit your LDAP source --> Advanced Settings
in the Filters section, under Alias Query the default value is: (proxyAddresses=smtp\3A%s)
Change this filter to:
(&(memberOf=[CN of the group you wish to use])(|(mail=%s)(proxyAddresses=smtp\3A%s)))
for example, my group is "North America Sales" within the "Sales" container, within my domain, "amer.company.com":
(&(memberOf=North America SalesCN=,OU=Sales,DC=amer,DC=company,DC=com)(|(mail=%s)(proxyAddresses=smtp\3A%s)))