LDAP Filters - matomo-org/plugin-LoginLdap GitHub Wiki

Setting LDAP search filters

My example is ment for Active Directory. You can use different LDAP search filters, as long as they are in correct format. Here are some examples:

  • (objectClass=person)
    
  • (objectCategory=person)(objectClass=user)
    
  • (objectCategory=person)(objectClass=user)( !(userAccountControl:1.2.840.113556.1.4.803:=2)) _all active users_
    
  • (objectCategory=person)(objectClass=user)(!cn=andy) _all user objects but andy_
    

PS! Do not include LDAP search ampersand (&), it will be added automatically, as the function looks like

<?php ldap_search($connection, $baseDN, "(&" . $yourFilter . "(" . $userField . "=" . $userName ."))"); ?>

More info: http://msdn.microsoft.com/en-us/library/windows/desktop/aa746475%28v=vs.85%29.aspx