Grommunio using ldapsearch?

Hello Community,

I have three open questions I would like to address here:

We plan to migrate to Grommunio paid version. Should we start with 2022-12-* version or should we wait till the release of Q1-2023?
In the backend of Grommunio regarding LDAP, is it using ldapsearch to perform import and search of users from a LDAP source?
We want to use Grommunio in combination with FreeIPA. How do we manage to sync only LDAP users that are in the status enabled in FreeIPA? We researched solutions like LDAP filters (for ldapsearch) like this '(!(userAccountControl:1.2.840.113556.1.4.803:=2))' and '(nsAccountLock=FALSE)' but both options do not work with our ldapsearch (we currently guess that the Grommunio LDAP import is done by ldapsearch).

Thank you for reading and helping me out.

Hi,

why wait, you definitely want to test the whole migration for a bit anyway.
https://docs.grommunio.com/admin/administration.html#ldap
I haven't tried the nsAccountLock but i can say that the following definitely works with an samba-ad-dc.
- ldap_user_filter=(&(objectCategory=person)(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))

Thank you for your feedback

You're welcome.

And i don't think that you require nsAccountLock if i'm not totaly mistaken because the Authentication can be set to "always-ldap" and if the account is locked you shouldn't be able to authenticate against the LDAP anyway.
https://docs.grommunio.com/admin/administration.html#authentication-manager