# Active Directory group mapping?

**URL:** <https://forum.opennebula.io/t/active-directory-group-mapping/2276>\
**Category:** Product Support\
**Created:** [May 23, 2016, 8:56am UTC](https://forum.opennebula.io/t/active-directory-group-mapping/2276 "2016-05-23T08:56:21Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![jfontan](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/jfontan/32/18_2.png) [@jfontan](https://forum.opennebula.io/u/jfontan)\
**Post date:** [June 6, 2016, 9:42am UTC](https://forum.opennebula.io/t/active-directory-group-mapping/2276/2 "2016-06-06T09:42:43Z")

</div>

Group mapping works with active directory. Here is the configuration I have in my machine:

```auto
$ onegroup show test | grep GROUP_DN
GROUP_DN="CN=cloud,CN=Groups,DC=opennebula,DC=org"
$ grep -v '^$' ldap_auth.conf | grep -v '^ *#'                
server 1:
    :user: 'Administrator@opennebula.org'
    :password: ' *******'
    :auth_method: :simple
    :host: domain.server
    :port: 389
    :base: 'dc=opennebula,dc=org'
    :user_field: 'sAMAccountName'
    :mapping_generate: true
    :mapping_timeout: 300
    :mapping_filename: server1.yaml
    :mapping_key: GROUP_DN
    :mapping_default: 1
:order:
    - server 1

```

This is the manual execution of the driver action with a test user in that cloud group and the mapping file that was generated automatically by the driver:

```auto
$ $ONE_LOCATION/var/remotes/auth/ldap/authenticate test - test
Trying server server 1
ldap test CN=test%20test,CN=Users,DC=opennebula,DC=org 100
$ cat $ONE_LOCATION/var/server1.yaml
---
CN=cloud,CN=Groups,DC=opennebula,DC=org: '100'

```

Notice the number 100 in the authentication test. That is the id of cloud group so it is correctly mapped.

---

_[View the full topic](https://forum.opennebula.io/t/active-directory-group-mapping/2276)._