openfire + ldap - group mapping

Hey guys,

installed the latest openfire by rpm, using embedded database and I did the setup to configurate openfire. Now what I need to do:

I got an AD with the Following structure:

• Users
  • Test1
    • User001
    • ...
    • User010
  • Test2
    • User011
    • ...
    • User020

Now I wan't that openfire is creating groups Test1 and Test2 and user only see all other users of his OU ...

So User001 - 010 should be able to see themselfs but noone of them should see any user of Test2 ... same the other way around.

My problems: 1.) - i wanna automatically populate the rosters of the users, and they shouldn't be allowed to edit them

2.) - they still cann search each other - I said only in their group on the server settings

3.) - i tried doing this by sharing the Group Test1 Contact List with the Group Test1. On my first try, the Group itself got shown in the list to share with. Now its not anymore, after reinstalling openfire ...

My config is basedn = OU=Users,DC=DOMAIN,DC=de and all other configurations are default. Ofc I entered a LDAP user - otherway this couldn't work