K1000 LDAP Label
Hi,
I'm trying to create an LDAP Label that will find any computer in the specified Active Directory security group. When doing the test, it works perfectly but when the LDAP label is enabled, it appears to add all computers when they sync.
Search Base DN: DC=company,DC=com
Search Filter: (&(name=KBOX_COMPUTER_NAME)(memberOf=CN=Sandbox - Managed Install,OU=Sandbox Security Groups,OU=Sandbox,DC=company,DC=com))
At the moment there are two computers in the Sandbox - Managed Install security group and when using an * for testing, it returns only the two computers in the group. However every computer in the inventory is added to the ldap label when they sync with the Kbox.
Can anyone explain where I'm going wrong?
Answers (1)
What server version are you on?
Comments:
-
try changing name=KBOX_COMPUTER_NAME to cn=KBOX_COMPUTER_NAME but your filter looks right.
when testing though I wouldn't use * , use the actually name of the machine and then a machine not in the group. - nshah 11 years ago -
Thanks for the replies.
I'm not sure what I was doing wrong initially but as soon as I posted this message, I tested it once again and it worked fine. - pj-bne 11 years ago