LDAP doesn't work with group restriction

[Curt]

Hello

I have Nextcloud up and running and it works well unless I limit user access to those belonging to certain groups, which is our desired config.

If I don’t specify any groups, The LDAP query returns 232 users. We only want 30 people using this so I try to limit access by adding groups to “Only from these groups”. As soon as I add a group, the query returns 0 users.

I can get around this by making these groups the Primary Active Directory group for it’s members but that creates other issues.

Is there a way to have Nextcloud populate its users by AD group membership without having to make those groups the primary group of its members?

[yerbol]

Hi Curt!

I am having the save problem with Nextcloud 16. Have you resolved it at all?

Cheers!

[Curt]

Hi Yerbol

There is no way around it. If you want to restrict users by AD group membership, that group must be the person’s primary group. It’s a Linux thing.

[mvv_vmd]

I think it is possible, I had the same issue, found the solution here:

[SOLVED] LDAP groups are empty but users are set up correctly

I just had the problem with our setup in which users existed and could be pulled from our ldap server but they didn’t show up in their groups which also showed up just fine. The problem was the user:group matching which can be set in advanced ldap settings under user group association. You will have to try the different association methods until your groups are filled with users. This took me a couple of hours to find out. I’m writing this here because there is not a single place on the interne…