[Support Request]: Entry restriction authorization from AD #2456

Closed
opened 2026-02-05 04:12:30 +03:00 by OVERLORD · 3 comments
Owner

Originally created by @Tsunani on GitHub (Oct 28, 2021).

Attempted Debugging

  • I have read the debugging page

Searched GitHub Issues

  • I have searched GitHub for the issue.

Describe the Scenario

Hello. I would like to know. How do I enable selected user groups to enter the site?
For example. If the user is in the book group, then he will be able to log in. Otherwise, it will be denied authorization.
Thank you in advance for your response.

Exact BookStack Version

v21.10.1

Log Content

No response

PHP Version

7.4

Hosting Environment

Ubuntu 20.04
Local

Originally created by @Tsunani on GitHub (Oct 28, 2021). ### Attempted Debugging - [X] I have read the debugging page ### Searched GitHub Issues - [X] I have searched GitHub for the issue. ### Describe the Scenario Hello. I would like to know. How do I enable selected user groups to enter the site? For example. If the user is in the book group, then he will be able to log in. Otherwise, it will be denied authorization. Thank you in advance for your response. ### Exact BookStack Version v21.10.1 ### Log Content _No response_ ### PHP Version 7.4 ### Hosting Environment Ubuntu 20.04 Local
OVERLORD added the 🐕 Support label 2026-02-05 04:12:30 +03:00
Author
Owner

@Tsunani commented on GitHub (Oct 28, 2021):

LDAP_USER_FILTER=(&(sAMAccountName=${user})) conf been and it work.

LDAP_USER_FILTER=(&(objectClass=user)(sAMAccountname={0})(memberof:1.2.840.113556.1.4.1941:=cn=Book-Users,OU=ServiceGroups,OU=WORK,OU=Users,DC=DOMAIN,DC=LOCAL)) is not work(

@Tsunani commented on GitHub (Oct 28, 2021): LDAP_USER_FILTER=(&(sAMAccountName=${user})) conf been and it work. LDAP_USER_FILTER=(&(objectClass=user)(sAMAccountname={0})(memberof:1.2.840.113556.1.4.1941:=cn=Book-Users,OU=ServiceGroups,OU=WORK,OU=Users,DC=DOMAIN,DC=LOCAL)) is not work(
Author
Owner

@Tsunani commented on GitHub (Oct 28, 2021):

LDAP_USER_FILTER=(&(sAMAccountName=${user})(memberOf:1.2.840.113556.1.4.1941:=CN=Book-Users,OU=ServiceGroups,OU=WORK,OU=Users,DC=DOMAIN,DC=LOCAL))

Work. I apologize for disturbing.

@Tsunani commented on GitHub (Oct 28, 2021): LDAP_USER_FILTER=(&(sAMAccountName=${user})(memberOf:1.2.840.113556.1.4.1941:=CN=Book-Users,OU=ServiceGroups,OU=WORK,OU=Users,DC=DOMAIN,DC=LOCAL)) Work. I apologize for disturbing.
Author
Owner

@ssddanbrown commented on GitHub (Oct 28, 2021):

Work. I apologize for disturbing.

No worries, happy to see you found a solution!

@ssddanbrown commented on GitHub (Oct 28, 2021): > Work. I apologize for disturbing. No worries, happy to see you found a solution!
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/BookStack#2456