Organizing Users in Organizational Units

Is it possible to create organizational units (LDAP structure OU) to put users into different OUs?
Currently all users are located flat in the container CN=users, which can be a bit confusing.

I see that user objects can be moved. But is it also possible to create new OUs to move users into these OUs?

Thanks a lot

Hello Cornelius,

yes, sure :slight_smile: You can either use the “LDAP directory” module in the blue “Domain” category in the UMC and just “Add” an object of the type “Organizational Unit”:

2018-03-05 09_37_51-UMC

2018-03-05 09_38_47-UMC

2018-03-05 09_39_55-UMC

Or you can use udm for this, too:

udm container/ou create --set name=Berlin \
    --set description="OU for users based in Berlin" \
    --set userPath=1

Make sure to set userPath=1. Otherwise the newly created OU will not show up in the dropdown as possible location when creating a new user via UMC.

Now you can simply specify a position when creating new users. E.g. for udm:

udm users/user create \
    --position "ou=Berlin,$(ucr get ldap/base)" \
    --set username="mary" \
    --set firstname="Mary" \
    --set lastname="Somerville" \
    --set password="SecretPassw0rd"

Or via UMC:

2018-03-05 09_43_18-UMC

1 Like

Yes, you just need to create the organizational unit and then you can move / create users.


regards, francesco.

1 Like

@bbassotti @Grandjean thanks a lot!
I probably was confused with where to “ADD” the OU in the LDAP tree. Now everything will work out fine!