Configuring Group Search Scope

The <objectType>.searchDNs define a list of distinguished names of the containers along with other relevant attributes the define the scope and filter for group aggregation.

Note
Only group.iterateSearchFilter will be respected during group aggregation.

Search DN

Defines scope of group aggregation for mentioned objectType.

Iterate Search Filter

LDAP filter for group aggregation.

Filter String

Filter that can filter objects after they have been returned from the underlying directory.

The following is an example of a Group Search Scope:

Note
The name of the objectType must be same as the name of the objectType of respective group schema for which the scope is defined.

<entry key="posixgroup.searchDNs">
  <value>
    <List>
      <Map>
        <entry key="iterateSearchFilter" value="(&amp;(objectclass=posixgroup))"/>
        <entry key="searchDN" value="ou=HR,dc=org,dc=com"/>
        <entry key="searchScope" value="SUBTREE"/>
      </Map>            
      <Map>
        <entry key="iterateSearchFilter" value="(&amp;(objectclass=posixgroup))"/>
        <entry key="searchDN" value="ou=Sales,dc=org,dc=com"/>
        <entry key="searchScope" value="SUBTREE"/>
      </Map>            
    </List>
  </value>
</entry>