Am 04.04.2015 um 17:49 schrieb Christian Vielhauer:
> Hi,
> 
> I try to show only active users addresses in my public address book.
> So I add the following as my filter in SOGoUserSources
> filter attribute: filter =
> "(&(mail=*)(!(UserAccountControl:1.2.840.113556.1.4.803:=2)))“;
> 
> How looks the correct way? I am using Samba 4.1.17 as AD with latest
> nightly SOGo build.
> Because there is no status field I have to use UserAccountControl to
> filter expired and disabled accounts
> …. 
> http://blogs.technet.com/b/heyscriptingguy/archive/2005/05/12/how-can-i-get-a-list-of-all-the-disabled-user-accounts-in-active-directory.aspx
> 
> With my filter Sogo starts, but shows a lot of empty address book
> entries and also shows disabled entries, because my filter in not
> correct of SOGo usage.
> 
> 
> 2015-04-04 17:41:23.790 sogod[2528] WARNING(+[EOQualifier(Parsing)
> qualifierWithQualifierFormat:]): unexpected chars at the end of the
> string(class=GSMutableString,len=73) '(cn='*') AND
> (&(mail=*)(!(UserAccountControl:1.2.840.113556.1.4.803:=2)))'
> 
> 
> 
> Please help me to find the correct filter.
> 
> 
> Thanks in advance
> Chris

Hi Chris and happy easter again,

the correct syntax of your ldap filter inside sogo is:

((cn="*") AND (mail="*") AND (NOT
userAccountControl:1.2.840.113556.1.4.803:=2))

Take care of the quotation marks at cn and mail.

for sogo I use:
((samAccountType=805306368) AND (mail="*") AND (NOT
userAccountControl:1.2.840.113556.1.4.803:=2) AND (NOT
isCriticalSystemObject=TRUE))

for dovecot (iterate_filter):
(&(samAccountType=805306368)(mail=*)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!(isCriticalSystemObject=TRUE)))

... same filter, different syntax.

My filter shoud do:
- show all users, like (&(objectCategory=person)(objectClass=user)),but
also more effective
AND
- mail address is set
AND NOT
- user account is disabled
AND NOT
- isCriticalSystemObject flag set, like account "Administrator"

Ressources:
http://support.microsoft.com/en-us/kb/269181
http://www.selfadsi.org/ldap-filter.htm

Greetings
Sven

-- 
[email protected]
https://inverse.ca/sogo/lists

Reply via email to