Is it possible to setup a an object selection on Users in folders with a specific name

Question

We're trying to setup a new action in our Web interface that runs on User's that are currently in an OU called 'New Starters' that is in all of our domains (An integration with our HR system creates accounts with all details completed into these OUs)

I've tried creating an LDAP filter: (distinguishedName=OU=New Starters)

But this just returns no results, There are no other fields we can use that are unique to accounts in those OUs

Answer 1

Hello Richard,

Unfortunately, there is no such possibility because it is not allowed to use wildcards for DN syntax properties in LDAP filters. However, thank you for the suggestion, we will consider it.

As a solution, you can create a separate Web Interface action for each OU and specify the OU in the Allow selecting only AD objects located under field.

Comments

Ahh ok, thanks for the info. If we used a scheduled task to add a custom boolean attribute to all Users in those OUs could we create an LDAP filter on that custom attribute?

---

Hello Richard,

Unfortunately, this approach will also not work as Adaxes custom attributes cannot be used in LDAP filters. However, you can set any Active Directory property that is not in use no a specific value and then build an LDAP filter based on the property and its value.