Configure Group Name Attributes

You can configure the ActiveDirectoryAuthenticator to use a group name other than cn.

If the group name for Active Directory server is set to anything other than the default value cn, you must change the group name. If you change the value, you must also change the values of AllGroupsFilter and GroupFromNameFilter as in the AnOtherGroupAttribute attribute.

Attribute Name	Default Setting	Required New Setting
StaticGroupNameAttribute/DynamicGroupNameAttribute	cn	AnOtherGroupAttribute
AllGroupsFilter	(&(cn=*)(objectclass=person))	(&(AnOtherGroupAttribute =*)(objectclass=person))
GroupFromNameFilter	(&(cn=%u)(objectclass=person))	(&(AnOtherGroupAttribute =%u)(objectclass=person))

Make the changes in the Provider Specific tab, using the values in the table, substitute the AnOtherGroupAttribute setting with your own value. To display the Provider Specific tab, see Reconfigure Microsoft Active Directory as the Authentication Provider.