AD ldap multiple path synchronization

john2994

I have  this properties,

ldap.synchronization.userSearchBase=DC\=main,DC\=fip
ldap.synchronization.personQuery=(&(objectClass\=user)(memberOf\=CN\=Пользователи СЭД,OU\=Users,OU\=FIP,DC\=main,DC\=fip)(!(cn\=Guest))(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(memberOf\=CN\=Пользователи СЭД,OU\=Users,OU\=FIP,DC\=main,DC\=fip)(!(cn\=Guest))

and this AD tree structure

So far i have managed to sync users from AD to alfresco from last folder "Users", but now i need to sync users from both "Users" folder and "Labs". What do i need to change in properies in order to manage that? Thanks in advance.

sufo

You have to use OR operator "|" in ldap search string:

ldap.synchronization.userSearchBase=DC\=main,DC\=fip
ldap.synchronization.personQuery=(&(objectClass\=user)(|(memberOf\=CN\=Пользователи СЭД,OU\=Users,OU\=FIP,DC\=main,DC\=fip)(memberOf\=CN\=Пользователи СЭД,OU\=Labs,OU\=FIP,DC\=main,DC\=fip))(!(cn\=Guest))(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(|(memberOf\=CN\=Пользователи СЭД,OU\=Users,OU\=FIP,DC\=main,DC\=fip)(memberOf\=CN\=Пользователи СЭД,OU\=Labs,OU\=FIP,DC\=main,DC\=fip))(!(cn\=Guest))