Adding VIP Administrators in Nested Groups to VIP Manager through Enterprise Gateway LDAP sync

Products

• VIP Service

Issue/Introduction

Using LDAP sync to add VIP administrators to VIP Manager that are in LDAP nested groups

Environment

VIP Enterprise Gateway

Resolution

In this example, the group VIPadmins contains nested groups with members that need to be added or removed during an LDAP sync. To accomplish this, the LDAP filter memberOf:1.2.840.113556.1.4.1941:can be added to the Group Filter:

memberOf:1.2.840.113556.1.4.1941:=CN=VIPadmins,CN=Users,DC=LOCALDOMAIN,DC=local

Administrator Group mapping also supports this OID. This example shows the group mapping Attribute Name with memberOf:1.2.840.113556.1.4.1941:

Alternatively, the * wildcard can be used to sync all members of the User Filter group hierarchy: