LDAP AD Extended Query with 2 groups

[buomque1]

Hi guys,
I am having trouble setting up 2 different groups in LDAP Extended Query (Active Directory)
Everything works fine if I set it up with 1 group using the Extended Query:
"memberOf=CN=pfSenseAdmins,CN=Users,DC=idc,DC=us"

I need to add: "memberOf=CN=pfSenseUsers,CN=Users,DC=idc,DC=us" to the Query as well, but couldn't figure out how.

Things I have tried so far but failed:
(&(memberOf=CN=pfSenseAdmins,CN=Users,DC=idc,DC=us)(memberOf=CN=pfSenseUsers,CN=Users,DC=idc,DC=us))

(&(|(memberOf=CN=pfSenseAdmins,CN=Users,DC=idc,DC=us)(memberOf=CN=pfSenseUsers,CN=Users,DC=idc,DC=us))(sAMAccountName=%s))

Any help would be greatly appreciated.

Thank you,

[stephenw10]

So to be clear both those queries work individually but you want to authenticate only users who are members of both groups?

If you authenticate a user who is a member of both in Diag > Auth does it return both groups?

Where exactly are you using this?

Steve

[buomque1]

@stephenw10 said in LDAP AD Extended Query with 2 groups:

clear both those queries work individually but you want to authenticate only users who are members of both groups?

Sorry, I wasnt being clear in previous post. I found this post to be similar to my issue:
https://forum.netgate.com/topic/103988/ldap-extended-query-with-multiple-groups

The solutions in there did not work for me. Is there a way to make this work? My pfSense version is 2.4.2.

Thank you,