I have been though about 10 post here now on how to restrict logins based on security groups in ad and here is what i have.
This is in openfire.conf
<searchFilter>(memberOf:CN=AllStaff,OU=Office,OU=Other Sites,OU=KCS,DC=something,DC=K,DC=2,DC=3)</searchFilter>
(removed the acutall address but i can login as anyone outside of this group. Does this group have to be a Security Local group or can it be a global security group. The group listed above has a list of groups in it, is that a issue?
So far i have not been able to restrict others from using openfire so I haven't deployed it anywhere else except for my location.