LDAP with AD letting all users in

[s7thamon]

Version v4.9.3 - build 4395

I've got LDAP enabled for logins which appears to mostly be working okay.

Test LDAP Sync works, and Test LDAP Login works for users in AD.

The problem is, it's letting every user in, not just those that are in a group. I've tried numerous LDAP filters to no avail. Haven't been able to find anything in logs.

For the current filter I have:
&(objectClass=user)(memberof=CN=snipe,OU=Users,DC=mydomain,DC=com)

It will let all users login despite not being in the 'snipe' group.

[stale]

Is this still relevant? We haven't heard from anyone in a bit. If so, please comment with any updates or additional detail.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Don't take it personally, we just need to keep a handle on things. Thank you for your contributions!

[stale]

This issue has been automatically closed because it has not had recent activity. If you believe this is still an issue, please confirm that this issue is still happening in the most recent version of Snipe-IT and reply to this thread to re-open it.