Home / server / Questions / 275259
In Process
Possa
Asked: 2011-05-31 07:38:27 +0800 CST

Active Directory memberOf LDAP syntax

  • 772

I want to add a user (from Sun IDM to Active Directory) to more than one group.
The command memberOf: CN=AAA,OU=AAA,DC=AAA,DC=AAA is for only one and I want to add a second one immediatly after the first; e.g.:
memberOf: CN=AAA,OU=AAA,DC=AAA,DC=AAA and CN=BBB,OU=BBB,DC=BBB,DC=BBB

active-directory ldap sun identity-management

1 Answers

  1. Depending on how you're doing the adding, there are a couple of ways of doing this. MemberOf is a multi-valued attribute. If you're using an LDIF file, or direct LDAP syntax, you just add multiple MemberOf statements:

    Department: Human Resources
MemberOf: CN=AAA,OU=BBB,DC=CCC,DC=DDD
MemberOf: CN=AAB,OU=BBB,DC=CCC,DC=DDD
MemberOf: CN=ABC,OU=CDE,DC=CCC,DC,DDD
Full Name: Milton Ives
    • 3