We built a hierarchy in Sun one with various layers of OUs and groups with users under them.
We thought it would be good practice to have each user possess a single user entry in the hierarchy. We use CFLDAP to authenticate, but we would like to limit the FILTER= parameter to a subset of OUs and groups that lie across various OUs. Example. Under Sales we have GroupA and GroupB OUs Under Marketing we have GroupC and GroupD Under Executive we have user mrbig and mrsmall If i want to add more intelligence to my authentication and my website is only for GroupA and GroupC and those under Executive I would expect a filter statement like this: (&(objectclass=person)(|(ou=GroupA)(ou=GroupC)(ou=Executive))(uid=#form.username#)) But we cannot include ou in objectclass=person for some reason... Any clues? thanks ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Get the answers you are looking for on the ColdFusion Labs Forum direct from active programmers and developers. http://www.adobe.com/cfusion/webforums/forum/categories.cfm?forumid-72&catid=648 Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:293638 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4

