Ldap query to select only users that are member of a certain group

[tassitsupport]

HI there,

I'm trying to set up a phone (IP335) in such a way that the the Directory only shows users from AD that are member of a certain group (i.e. phonelist). So I tried doing this with dir.corp.filterPrefix but no luck so far.

I tried using a filter like:

dir.corp.filterPrefix="(objectclass=Person)(&(memberOf=cn=phonelist,ou=Groups,dc=domain,dc=local))"

And:

dir.corp.filterPrefix="(objectclass=Person)(memberOf=cn=phonelist,ou=Groups,dc=domain,dc=local)"

but those don't work, still getting all users.

Any suggestions?

[Bazzuck]

Hi!

try

(&(objectCategory=user)(memberOf=CN=phonelist,OU=Groups,DC=domain,DC=local))

[tassitsupport]

Tried it, but helas, no go.

[Bazzuck]

Why do you use dir.corp.filterPrefix parametr?

I think ou should use dir.corp.baseDN

dir.corp.baseDN=cn=phonelist,ou=Groups,dc=domain,dc=local

[tassitsupport]

As far as I understand the baseDN defines from where (in the tree) the search starts. So you define an OU there (which I did). And from there (and further down) the search starts.

[tassitsupport]

So I tried the following in 'AD users and computers' management console and it returns all users that are member of the phonelist group:

(&(objectCategory=user)(objectClass=user)(memberOf=CN=phonelist,OU=Groups,OU=org,DC=domain,DC=local))

But when I use this in the dir.corp.filterPrefix it doesn't work.

Anyone any suggestions?