Skip navigation
Up to Discussions in Openfire Support
546 Views 6 Replies Latest reply: Sep 14, 2011 2:37 PM by Evan Duncan RSS
Evan Duncan Bronze
Evan Duncan
5 posts since
Sep 2, 2011
Currently Being Moderated

Sep 2, 2011 9:10 AM

Openfire pulling wrong users

Hello,

 

I am new to the openfire community. I am trying to bring openfire to our university, but after installation and configuration I have found that when openfire pulls in the members of my groups that it is adding the wrong users. For example: Staff/Faculty members have more than one user name in active directory (one being a student account and one being a staff/faculty account)

 

Example Group:

 

Openfire pulls in the group: IT

 

bjohnson (a member of the IT group)

bill_johnson55 (not a member of the IT group)

 

When I go to the IT group in openfire it lists bill_johnson55 instead of bjohnson. I figure somehow its adding the person based off of the CN name instead of the sAMAccountName, but I'm not sure. Any suggestions on how to solve this issue?

 

-Evan

  • Evan Duncan Bronze
    Evan Duncan
    5 posts since
    Sep 2, 2011
    Currently Being Moderated
    Sep 6, 2011 10:11 AM (in response to Evan Duncan)
    Openfire pulling wrong users

    Still having the same issue. I've went to the System Properties in the Admin Console, and I've changed some of the properties from CN to sAMAccountName. Same results. The only solution I've been able to find is to put the users and groups that I want to use in their own OU and set that as the base OU. Surely there is a better solution than this. I am unable to move users and groups around due to the nature of my enterprise infrastructure. Any suggestions anyone?

    • M. Tejera Bronze
      M. Tejera
      21 posts since
      Aug 11, 2011
      Currently Being Moderated
      Sep 7, 2011 2:54 AM (in response to Evan Duncan)
      Re: Openfire pulling wrong users

      This thread might help you

       

      http://community.igniterealtime.org/message/196870#196870

       

      Specially the second post.Re: LDAP and AD - Limiting Users

      • Evan Duncan Bronze
        Evan Duncan
        5 posts since
        Sep 2, 2011
        Currently Being Moderated
        Sep 7, 2011 8:30 AM (in response to M. Tejera)
        Openfire pulling wrong users

        This was definately a good thought, after following all the instructions I am still in the same boat.

         

        The problem that I'm having is not filtering groups or users.

         

        Users: I have all the correct users showing up in the Openfire Users section.

        Groups: I have all the correct groups showing up in the Openfire Groups section.

         

        When I click on a specific group the members of that group are NOT ALL the correct members.

        Example: When I click on the IT group in Openfire Admin Console I see a user name:

         

        bill_johnson55

         

        He is NOT supposed to be there the actual user of that group in AD is:

         

        bjohnson

         

        The problem I think exists with the way that Openfire pulls Members of a Group. If I look with an LDAP browser at the "member" field of the Group I find an Array with all the users inside it in the format of:

         

        CN=Bill Johnson,OU=Staff,OU=Users,OU=companyOU,DC=Domain,DC=COM

         

        What I believe is happening is when Openfire pulls a member of a group it searches LDAP for:

        CN=Bill Johnson

         

        LDAP most likely returns the results of:

        bjohnson

        bill_johnson55

         

        Since they both have the CN of Bill Johnson. If I can find a way to make Openfire select the other user I believe I can solve my issue.

         

        Any more suggestions? (Please Help!)

        • M. Tejera Bronze
          M. Tejera
          21 posts since
          Aug 11, 2011
          Currently Being Moderated
          Sep 7, 2011 11:55 AM (in response to Evan Duncan)
          Openfire pulling wrong users

          A simple way imho would be to create a Security Group named for example "Chat User" and add the "standard" users, in this case the student accounts, to that group (remember you can add groups to groups in LDAP). Then when you add the users to openfire you use a LDAP filter to only add the users belonging to "Chat User".

          • Evan Duncan Bronze
            Evan Duncan
            5 posts since
            Sep 2, 2011
            Currently Being Moderated
            Sep 8, 2011 8:47 AM (in response to M. Tejera)
            Openfire pulling wrong users

            I am already set up that way. I have a Group called:

             

            openfire_groups: Only the groups I want in openfire are a member of this group

            openfire_users: Only the users I want in openfire are a member of this group

             

            The filters only point to these AD groups, but I still get the same problem as stated before. My second post explains why I believe this happens.

             

            bjohnson is a member of the openfire_users group and in a group in the openfire_groups, but when openfire pulls in the groups it pulls the member bill_johnson55 into the group because Openfire searches by CN instead of sAMAccountName, Even though bill_johnson55 is NOT in openfire_groups or openfire_users. He does NOT show up under the Users list in openfire, but when I look at the group that bjohnson should be a member of, I see bill_johnson55 in his place greyed out.

             

            Help!

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points