KB Article #101328

Filtering LDAP users based on group membership

Filtering LDAP users based on group membership

Question

I am using LDAP to authenticate my users for File Transfer Direct, but I only want specific groups to be able to log in and send packages.  Can I filter the logins by Active Directory group?

Answer

As of version 1.5 this is not a part of the design of FTDirect, but the following workaround should work. 
NOTE:  this workaround may not work in later versions of FTDirect, and it may not work if you are using Single Sign On (SSO).  This is not a feature and is not officially supported.

In the FTDirect admin interface, go to:
Administration (tab) --> LDAP Directories --> add/edit your LDAP source --> Advanced Settings

in the Filters section, under Alias Query the default value is:  (proxyAddresses=smtp\3A%s)

Change this filter to: 
(&(memberOf=[CN of the group you wish to use])(|(mail=%s)(proxyAddresses=smtp\3A%s)))

for example, my group is "North America Sales" within the "Sales" container, within my domain, "amer.company.com":
(&(memberOf=North America SalesCN=,OU=Sales,DC=amer,DC=company,DC=com)(|(mail=%s)(proxyAddresses=smtp\3A%s)))