The OU Filters should be used to specify the Organizational Units (OUs) that you want to be included or excluded in the group/user cache that gets imported into the Barracuda SSL VPN.
You can use this feature to limit how many users or groups that you want the SSL VPN to cache for logon purposes. Limiting what is cached in this way can make the Accounts and Groups lists less cluttered, making it easier to administer the system and it also has a performance benefit in that the whole User Database doesn’t need to be cached on each cache refresh cycle.
For example if you have an OU called Employees in the domain example.com that contains both users and groups then you would find the following OU in the list of available filters in the include section and add it to the selected filters:
Likewise if the Employees OU was a sub container of another OU called Company, the filter would appear like:
Note that built in containers such as Users, are referred to as CN=Users for example.
When you are configuring a new User Database or you edit an existing one, the SSL VPN should automatically fetch a list of all available OUs on the domain. An OU name will often be longer than can be displayed in the text list, but if you click on an OU, the full name will be displayed under the mouse pointer.
If the Available OU filters do not display when creating a new User Database, either click the Test button to make a test connection to the database, or save the configuration and re-edit it again. The list should then be populated.
You may choose to use either Include Filters (cache only objects from this OU) or Exclude Filters (cache every object EXCEPT objects from this OU),
or you may choose a combination (such as needing to include one OU, but then exclude a child OU underneath this one).
Link to This Page: