Published at DZone with permission of Prabath Siriwardena, author and DZone MVB. (source)
When you configure Lifeary to talk to an LDAP - it imports users and groups in two different ways.
1. Import users and while importing users look at the "Group" attribute of the user and import groups.
2. Import groups and while importing groups look at the "User" attribute of the group and import all the users of that group.
By default Liferay uses the first approach.
If we want to import Groups only - not the users from the LDAP - then we need to have the 2nd approach.
To enable the second approach, you need to add the following to the
Then you need to keep the "User" attribute of the group configuration blank.
(Note: Opinions expressed in this article and its replies are the opinions of their respective authors and not those of DZone, Inc.)