default-ldap-users-directory-config.xml

<component name="org.nuxeo.ecm.directory.ldap.storage.users">

  <require>org.nuxeo.ecm.directory.ldap.LDAPDirectoryFactory</require>
  <require>org.nuxeo.ecm.directory.sql.storage</require>

  <extension target="org.nuxeo.ecm.directory.ldap.LDAPDirectoryFactory" point="servers">

        <server name="default">
          <ldapUrl>ldap://SRV:389</ldapUrl>
          <bindDn>CN=User,OU=Services,OU=Corporate,DC=A,DC=B,DC=C,DC=D</bindDn>
          <bindPassword>password</bindPassword>
        </server>

   </extension>

  <extension target="org.nuxeo.ecm.directory.ldap.LDAPDirectoryFactory" point="directories">

    <directory name="userDirectory">
          <server>default</server>
          <schema>user</schema>
          <idField>username</idField>
          <passwordField>password</passwordField>
          <searchBaseDn>DC=dsto,DC=defence,DC=gov,DC=au</searchBaseDn>
          <searchClass>person</searchClass>
          <searchScope>onelevel</searchScope>
          <substringMatchType>subany</substringMatchType>
          <readOnly>false</readOnly>
          <cacheTimeout>3600</cacheTimeout>
          <cacheMaxSize>1000</cacheMaxSize>
          <missingIdFieldCase>lower</missingIdFieldCase>
          <querySizeLimit>200</querySizeLimit>
          <queryTimeLimit>0</queryTimeLimit>

          <creationBaseDn>OU=Users,OU=OU1,OU=OU2,DC=A,DC=B,DC=C,DC=D</creationBaseDn>
          <creationClass>top</creationClass>
          <creationClass>person</creationClass>
          <creationClass>organizationalPerson</creationClass>
          <creationClass>inetOrgPerson</creationClass>

          <rdnAttribute>uid</rdnAttribute>

          <fieldMapping name="username">sAMAccountName</fieldMapping>
          <fieldMapping name="password">userPassword</fieldMapping>
          <fieldMapping name="firstName">givenName</fieldMapping>
          <fieldMapping name="lastName">sn</fieldMapping>
          <fieldMapping name="company">department</fieldMapping>
          <fieldMapping name="email">mail</fieldMapping>

          <references>
                <inverseReference field="groups" directory="groupDirectory" dualReferenceField="members" />
          </references>

    </directory>

    <directory name="groupDirectory">

        <server>default</server>
        <schema>group</schema>
        <idField>groupname</idField>
        <searchBaseDn>DC=A,DC=B,DC=C,DC=D</searchBaseDn>
        <searchFilter>(|(objectClass=groupOfUniqueNames)(objectClass=groupOfURLs))</searchFilter>
        <searchScope>subtree</searchScope>
        <readOnly>false</readOnly>
        <cacheTimeout>3600</cacheTimeout>
        <cacheMaxSize>1000</cacheMaxSize>
        <creationBaseDn>OU=JOD,OU=FBN,DC=dsto,DC=defence,DC=gov,DC=au</creationBaseDn>
        <creationClass>top</creationClass>
        <creationClass>groupOfUniqueNames</creationClass>
        <rdnAttribute>cn</rdnAttribute>
        <querySizeLimit>200</querySizeLimit>
        <queryTimeLimit>0</queryTimeLimit>
        <fieldMapping name="groupname">cn</fieldMapping>

        <references>

            <ldapReference directory="userDirectory"
                dynamicAttributeId="memberURL" field="members"
                forceDnConsistencyCheck="false" staticAttributeId="uniqueMember"/>
            <ldapReference directory="groupDirectory"
                dynamicAttributeId="memberURL" field="subGroups"
                forceDnConsistencyCheck="false" staticAttributeId="uniqueMember"/>

            <inverseReference directory="groupDirectory"
                dualReferenceField="subGroups" field="parentGroups"/>

            <ldapTreeReference directory="groupDirectory"
                field="children" scope="onelevel"/>

            <inverseReference directory="groupDirectory"
                dualReferenceField="children" field="parents"/>
        </references>

    </directory>

  </extension>

  <extension target="org.nuxeo.ecm.platform.usermanager.UserService" point="userManager">

    <userManager>
      <defaultAdministratorId>kivsharb</defaultAdministratorId>
      <defaultGroup>members</defaultGroup>
    </userManager>

  </extension>