Modify the LDAP search filter to find other objects in Schemus

Products

• Email Security.cloud

Issue/Introduction

When running a search, the Schemus LDAP Synchronization Tool is unable to find other objects that could also be returned from the directory.

Cause

The default search filter on the LDAP Search tab in the Schemus configuration only includes:

(|(&(objectCategory=person)(objectClass=user))(objectCategory=group))

Resolution

To allow Schemus to find other objects, the default search filter needs to be updated in the Schemus configuration by following these steps:

1. Open Schemus
2. Select the configuration
3. Click on Configuration at the top menu
4. Click on Modify
5. Make sure the "Mail" Synchronization type is selected
6. Click on LDAP Search at the left menu
7. Modify the search filter from:

(|(&(objectCategory=person)(objectClass=user))(objectCategory=group))

to:

(|(objectclass=user)(objectclass=publicFolder)(objectclass=group)(objectclass=Contact)(objectclass=person)(objectCategory=msExchDynamicDistributionList))

Note: The Search filter setting determines the objects that are returned from the directory. The search string listed above will let Schemus know to search for the different objects such as user, person, contact, group as well as public folder and dynamic groups.

Reference links:

• Object Class and Object Category
• Deciding What to Find