Security groups
You can view and manage security groups that Passwork loads from LDAP in the Groups tab of LDAP settings.
1. Your Security group settings 2. Perform a group list force reload 3. A list of groups
Each group can have one of the following values in the Status field:
- Deleted means that after executing the DN request, the group was not uploaded into Passwork or was deleted on the LDAP server.
- An empty Status field means that a group loaded, but no role was matched with it.
An administrator can restrict user authorization. If the restriction is enabled, a user will be able to authorize and register only if they belong to one of the selected groups.
You can quickly view a list of users in a particular group by clicking the pop-up button near the group's name:
Security groups load from LDAP in the following sequence:
- Passwork authorizes on the LDAP server through an account with the user data entered on the authorization page.
- A group search request is sent to the LDAP server using default or edited DNs and search filters.
- The request result is received and groups are uploaded from the LDAP server into Passwork.
If you change the DN group search request or delete a group that was previously used on the LDAP server, deleted groups and groups that were not found will receive a Deleted status when you perform a search again.
On the Groups tab, you can find the settings that Passwork will use when loading a list of security groups from LDAP:
Specify the Distinguished name (DN) to define the part of the Active Directory Passwork should download from. For example:
ou=IT,dc=passwork,dc=uk
You can use a DN filter to determine what kind of data can be searched on LDAP. For example:
(|(objectclass=group)(objectclass=organizationalRole)(objectclass=posixGroup))
It is possible to add an additional DN and filter requests to get groups from two independent tree-like structures of the LDAP server.
To do so, click the Add DN and filter button located under the Filter for DN section, then fill in the fields.
Additional DNs and filters help expand the group search and management capabilities, providing more flexible system settings. For example, if security groups are located in several LDAP trees, adding an additional DN and filter request for each tree will eliminate the need for long and resource-intensive download of the entire structure.
You can learn about the features of DN filters and see more examples of syntax on the DN filters page
