2016-11-15 52 views
1

我們正在將WSO2-Identity Server 5.1.0與Active Directory中的多個路徑連接到一個用戶庫時遇到問題。在WSO2 IS用戶存儲中配置多個Active Directory路徑

我們在Active Directory中的配置如下:

|- DC=org 
    |- DC=company 
     |- DC=users 
      |- OU=Department1 
      |- CN=User1 
      |- CN=User2 
      |- OU=Department2 
      |- CN=User3 

我已經創建了一個基於Active Directory的UserStore是正確獲取用戶Department1(用戶1和用戶)。現在我想從Department2中獲取用戶而不創建另一個UserStore。

我嘗試以下濾波器在 「用戶搜索庫」 字段不succees:

  • (&(OU = Department1)(OU = Department2)),DC =用戶,DC =公司,DC =組織
  • ((|(OU = Department1)(OU = Department2)),DC =用戶,DC =公司,DC = ORG)
  • (&(OU = Department1,DC =用戶,DC =公司,DC = org)(OU = Department2,DC = users,DC = company,DC = org))
  • (|(OU = Department1,DC = users,DC = company,DC = org)(OU = Department2,DC = users ,DC = COMPAN Y,DC = ORG))
  • OU =(&(Department1)(Department2)),DC =用戶,DC =公司,DC =組織
  • OU = Department1,DC =用戶,DC =公司,DC = org; OU = Department2,DC = users,DC = company,DC = org
  • ((OU = Department1,DC = users,DC = company,DC = org)(OU = Department2,DC = users,DC = company ,DC = ORG))

我也試圖讓所有的用戶在「用戶搜索庫」,併爲這些用戶過濾器:

  • 「用戶搜索庫」:DC (CN = {0},OU = Department1,DC =用戶,DC =公司,DC = org)(CN = {0} =用戶,DC =公司,DC = org
  • 「用戶DN模式」 ,OU = Department2,DC =用戶,DC =公司,DC = ORG))(|(CN = {0},OU = Department1,DC =用戶,DC =公司,DC = ORG)(CN = {0}, OU = Department2,DC = users,DC = company,DC = org))CN = {0},(|(OU = Department1)(OU = Department2)),DC = users,DC = company,DC = org

有沒有任何方法可以正確配置,而無需在一個單一的userStore?

謝謝!

回答

2

嘗試使用散列符號(#)作爲分隔符。

ou=Department1,dc=users,dc=company,dc=org#ou=Department2,dc=users,dc=company,dc=org 
相關問題