Microsoft Active Directory LDAP configuration

[Gnanabaskar]

Hi All,

We are using Microsoft Active Directory in Jira Server. But it is synced with unwanted groups with invalid email address. Since we are migrating from server to cloud we need to config a new Microsoft Active Directory for jira-users group & jira-admin group only. We dont want other groups in MS AD. 

User Object filter : (&(objectCategory=Person)(sAMAccountName=*))

Group Object Filter = (objectCategory=Group)

Kindly assist on how to setup the above filters for jira-users & jira admin groups only. 

Thanks 

Pradeep

[Matthew Knatz]

This should have everything you need:

https://confluence.atlassian.com/kb/how-to-write-ldap-search-filters-792496933.html

the tl;dr is that you can probably use the following (you'll need to modify the dc= entries to match your domain

(&(objectCategory=Person)(sAMAccountName=*)(|(memberOf=cn=jira-users,ou=users,dc=company,dc=com)(memberOf=cn=jira admin,ou=users,dc=company,dc=com)))