.

nextcloud/nextcloud.yaml

@@ -76,7 +76,7 @@ data:
     set_cfg ldapAgentPassword "${LDAP_BIND_PASSWORD}"
 
     set_cfg ldapLoginFilter "(&(objectClass=user)(sAMAccountName=%uid))"
-    set_cfg ldapUserFilter "(&(objectClass=user)(sAMAccountName=*))"
+    set_cfg ldapUserFilter "(|(|(memberof=CN=undercloud-users,OU=groups,OU=Undercloud,DC=undercloud,DC=local)(primaryGroupID=1103)))"
     set_cfg ldapUserDisplayName "cn"
     set_cfg ldapEmailAttribute "mail"
 
@@ -92,6 +92,8 @@ data:
     set_cfg turnOffCertCheck "1"
     set_cfg ldapTLS "0"
 
+    set_cfg ldapAdminGroup "nextcloud-admins"
+
     echo "[ldap-bootstrap] testing LDAP config ${LDAP_CONFIG_ID}"
     if php occ ldap:test-config "${LDAP_CONFIG_ID}"; then
       echo "[ldap-bootstrap] LDAP config OK"