Moodle LDAP - cannot target specific OUs

[nickjelly]

Hi,

 

I am looking to fine tune our Moodle LDAP integration. Currently it is pointing to too many OUs when authenticating.

 

In our LDAP settings our contexts field is set up to look at an OU that sits at the top of the AD Directory. My attempts at getting it to look at just a handful of specific OUs have failed miserably Has anyone had experience of doing this?

 

I've attached a screenshot of our AD directory and indicated the 4 OUs I want to target. We currently have it set to look at the top OU called 'Users and Groups'. In the Context field of LDAP settings this looks like

 

ou=users and groups,dc=our,dc=domain

 

How to specify the sub OUs only?

 

[Achandler]

I think you can only choose 1, so the bets you coudl do is add the ou=Users at the start of your current setup

[chilbs]

You can search multiple you need the Distinguished names for the OU separated by semi colons (

 

eg ou=subOU1,ou=users and groups,dc=our,dc=domain;ou=subOU2,ou=users and groups,dc=our,dc=domain;ou=subOU3,ou=subOU3,ou=users and groups,dc=our,dc=domain

[nickjelly]

Thank you! I shall give this a try.

[nickjelly]

I changed the contexts string to what you suggested and it failed to authenticate me when I tried to log in. Does it require a reboot of the moodle server for the settings to take effect? Edited September 29, 2014 by nickjelly

[nickjelly]

My error - I'd missed an OU in the string - it works. Thanks @chilbs