Updated: 2008-04-01
The Import Members From a Directory Server feature, accessible from the Add Members page, allows you to add users to a management domain by importing user information from a corporate LDAP-based directory installed at your site. The process provides two main search options: one that lets you search for users in the directory by full name, and another that lets you enter a Lightweight Directory Access Protocol (LDAP) search filter that overrides any full name. This section provides details about entering a custom search filter.
See Importing Members from a Directory for information about importing user information from a directory and accessing the Custom Filter field.
The Groove Manager maps the supported directory attributes as shown in Table 1 below.
.gif) Note: |
|---|
|
The directory attribute names shown in the table may vary, depending on which directory server version you are running.
|
Table 1. Groove Manager-to-LDAP Attribute Mapping
|
Groove Manager & Groove Contact Properties
|
Active Directory
|
IPlanet
|
Domino
|
|---|
|
Full Name
|
cn
|
cn
|
cn
|
|
First Name
|
given Name
|
given Name
|
given Name
|
|
Last Name
|
sn
|
sn
|
sn
|
|
title
|
title
|
title
|
title
|
|
e-mail
|
mail
|
mail
|
mail
|
|
orgPhone
|
telephonenumber
|
telephonenumber
|
telephonenumber
|
|
orgCell
|
mobile
|
mobile
|
mobile
|
|
orgFax
|
facsmileTelephoneNumber
|
Fax
|
facsimileTelephoneNumber
|
|
Company
|
company
|
o
|
o
|
|
orgStreet
|
street
|
street
|
officestreetaddress
|
|
orgState
|
st
|
st
|
st
|
|
orgCity
|
l
|
l
|
l
|
|
orgCountryOrRegion
|
c
|
c
|
c
|
|
orgPostalCode
|
postalcode
|
postalcode
|
postalcode
|
|
Unique Identifier (not in Groove Contact Properties)
|
objectGUID
|
nsuniqueid
|
UID
|
You must have at least Read rights to all attributes in your search string.
To enter a simple LDAP search string in the Enter Custom Filter field, use the following basic format:
(<filtercomp>(<attribute><filtertype><value>)(<attribute><filtertype><value>))...
where
<filtercomp> = An optional boolean operator, entered as a prefix to the search string, as shown in the following table:
|
<filtercomp>
|
Definition
|
|---|
|
&
|
And
|
|
|
|
Or
|
|
!
|
Not
|
|
<filtercomp>
|
Definition
|
<attribute> = An attribute from the LDAP directory table. For example, in an Active Directory table, o is an attribute representing the organization or company to which an employee belongs. See Table 1. Groove Manager-to-LDAP Attribute Mapping, above, for a list of Active Directory, iPlanet, and Domino directory attributes.
<filtertype> = Any of the following symbols:
|
filtertype>
|
Definition
|
|---|
|
=
|
Equals
|
|
~=
|
Approximately
|
|
>
|
Greater than
|
|
<
|
Less than
|
<value> = An attribute value from the LDAP directory.
Note that subfilters can be nested within filters.
The following table shows some sample search filters for each directory type:
|
Search Expression
|
Sample Filters
|
|---|
|
Search for all employees who work for any of the contoso companies.
<attribute><filtertype><value>
|
Active Directory, iPlanet, Domino:
o=contoso*
|
|
Search for an employee whose full name is John Doe.
<attribute><filtertype><value>
|
Active Directory, iPlanet, or Domino:
cn=John Doe
|
|
Search for all employees except for John Doe and Jane Brown.
(<filtercomp>(<filtercomp>(<attribute><filtertype><value>))(<filtercomp>(<attribute><filtertype><value>)))
|
Active Directory, iPlanet, or Domino:
(&(!(cn=John Doe))(!(cn=Jane Brown)))
|
|
Search for all employees whose full name begins with A or B.
(<filtercomp>(<filtercomp>(<attribute><filtertype><value>))(<filtercomp>(<attribute><filtertype><value>)))>
|
Active Directory, iPlanet, or Domino:
(|(cn=A*)(cn=B*))
|
|
Search for an employee who works for Contoso Corp. and whose last name is Doe or whose full name is John D.
(<filtercomp>(<attribute><filtertype><value>)(<filtercomp(<attribute><filtertype><value>)(<attribute><filtertype><value>)))
|
Active Directory, iPlanet, or Domino:
(&(o=Contoso Corp.)(|(sn=Doe)(cn=John D*)))
|
|
Search for all employees that are members of a specified group (such as Groove*) defined on the directory server.
(<filtercomp>(<attribute><filtertype><value>)(<attribute><filtertype><value>))
|
Active Directory:
(&(objectclass=group)(cn=Groove*))
iPlanet:
(&(objectclass=groupofuniquenames)(cn=Groove*))
Domino:
(&(objectclass=groupofnames)(cn=Groove*))
(&(objectclass=dominoGroup)(cn=Groove*))
|
See Also