исправил, но результат тот же самый
admin.authorizedJIDs knight@winserver
ldap.adminDN knight@turizm.local
ldap.adminPassword hidden
ldap.autoFollowAliasReferrals true
ldap.autoFollowReferrals false
ldap.baseDN dc=turizm, dc=local
ldap.connectionPoolEnabled true
ldap.debugEnabled false
ldap.emailField mail
ldap.encloseDNs true
ldap.groupDescriptionField description
ldap.groupMemberField member
ldap.groupNameField cn
ldap.groupSearchFilter (objectClass=group)
ldap.host winserver
ldap.ldapDebugEnabled false
ldap.nameField cn
ldap.override.avatar false
ldap.port 389
ldap.posixMode false
ldap.searchFilter (&(objectClass=organizationalPerson)(memberOf=cn=IM,cn=Users,dc=turizm,dc=local))(&(objectClass=user)(!(objectClass=computer))(!(userAccountControl=514))(!(userAccountControl=546))(!(userAccountControl=66050)))
ldap.sslEnabled false
ldap.usernameField sAMAccountName
ldap.vcard-mapping
<N>
<GIVEN>{cn}</GIVEN>
</N>
<EMAIL>
<INTERNET/>
<USERID>{mail}</USERID>
</EMAIL>
<FN>{displayName}</FN>
<ADR>
<HOME/>
<STREET>{homePostalAddress}</STREET>
<PCODE>{homeZip}</PCODE>
<CTRY>{co}</CTRY>
</ADR>
<ADR>
<WORK/>
<STREET>{streetAddress}</STREET>
<LOCALITY>{l}</LOCALITY>
<REGION>{st}</REGION>
<PCODE>{postalCode}</PCODE>
<CTRY>{co}</CTRY>
</ADR>
<TEL>
<HOME/>
<VOICE/>
<NUMBER>{homePhone}</NUMBER>
</TEL>
<TEL>
<HOME/>
<CELL/>
<NUMBER>{mobile}</NUMBER>
</TEL>
<TEL>
<WORK/>
<VOICE/>
<NUMBER>{telephoneNumber}</NUMBER>
</TEL>
<TEL>
<WORK/>
<CELL/>
<NUMBER>{mobile}</NUMBER>
</TEL>
<TEL>
<WORK/>
<FAX/>
<NUMBER>{facsimileTelephoneNumber}</NUMBER>
</TEL>
<TEL>
<WORK/>
<PAGER/>
<NUMBER>{pager}</NUMBER>
</TEL>
<TITLE>{title}</TITLE>
<ORG>
<ORGUNIT>{department}</ORGUNIT>
</ORG>
</vCard>]]>"><![CDATA[
<vCard xmlns="vcard-temp">
<N>
<GIVEN>{cn}</GIVEN>
</N>
<EMAIL>
<INTERNET/>
<USERID>{mail}</USERID>
</EMAIL>
<FN>{displayName}</FN>
<ADR>
<HOME/>
<STREET>{homePostalAddress}</STREET>
<PCODE>{homeZip}</PCODE>
<CTRY>{co}</CTRY>
</ADR>
<ADR>
<WORK/>
<STREET>{streetAddress}</STREET>
<LOCALITY>{l}</LOCALITY>
<REGION>{st}</REGION>
<PCODE>{postalCode}</PCODE>
<CTRY>{co}</CTRY>
</ADR>
<TEL>
<HOME/>
<VOICE/>
<NUMBER>{homePhone}</NUMBER>
</TEL>
<TEL>
<HOME/>
<CELL/>
<NUMBER>{mobile}</NUMBER>
</TEL>
<TEL>
<WORK/>
<VOICE/>
<NUMBER>{telephoneNumber}</NUMBER>
</TEL>
<TEL>
<WORK/>
<CELL/>
<NUMBER>{mobile}</NUMBER>
</TEL>
<TEL>
<WORK/>
<FAX/>
<NUMBER>{facsimileTelephoneNumber}</NUMBER>
</TEL>
<TEL>
<WORK/>
<PAGER/>
<NUMBER>{pager}</NUMBER>
</TEL>
<TITLE>{title}</TITLE>
<ORG>
<ORGUNIT>{department}</ORGUNIT>
</ORG>
</vCard>]]>
locale.timeZone Europe/Moscow
passwordKey hidden
provider.admin.className org.jivesoftware.openfire.admin.DefaultAdminProvider
provider.auth.className org.jivesoftware.openfire.ldap.LdapAuthProvider
provider.authorization.classList org.jivesoftware.openfire.sasl.StrictAuthorizationPolicy org.jivesoftware.openfire.sasl.DefaultAuthorizationPolicy
provider.group.className org.jivesoftware.openfire.ldap.LdapGroupProvider
provider.lockout.className org.jivesoftware.openfire.lockout.DefaultLockOutProvider
provider.securityAudit.className org.jivesoftware.openfire.security.DefaultSecurityAuditProvider
provider.user.className org.jivesoftware.openfire.ldap.LdapUserProvider
provider.vcard.className org.jivesoftware.openfire.ldap.LdapVCardProvider
register.inband false
register.password hidden
sasl.mechs ANONYMOUS,PLAIN,NTLM
sasl.realm WINSERVER
update.lastCheck 306842792609
update.notify-admins true
update.proxy.port -1
update.service-enabled false
xmpp.auth.anonymous true
xmpp.auth.sharedSecretEnabled true
xmpp.client.idle 360000
xmpp.client.idle.ping true
xmpp.client.tls.policy disabled
xmpp.domain winserver
xmpp.filetransfer.enabled true
xmpp.offline.quota 102400
xmpp.offline.type store
xmpp.proxy.enabled false
xmpp.server.certificate.accept-selfsigned false
xmpp.server.dialback.enabled false
xmpp.server.socket.active false
xmpp.server.tls.enabled false
xmpp.session.conflict-limit 0
xmpp.socket.ssl.active false
Пандион установлен 2.6.106 стабильная
admin.authorizedJIDs knight@winserver
ldap.adminDN knight@turizm.local
ldap.adminPassword hidden
ldap.autoFollowAliasReferrals true
ldap.autoFollowReferrals false
ldap.baseDN dc=turizm, dc=local
ldap.connectionPoolEnabled true
ldap.debugEnabled false
ldap.emailField mail
ldap.encloseDNs true
ldap.groupDescriptionField description
ldap.groupMemberField member
ldap.groupNameField cn
ldap.groupSearchFilter (objectClass=group)
ldap.host winserver
ldap.ldapDebugEnabled false
ldap.nameField cn
ldap.override.avatar false
ldap.port 389
ldap.posixMode false
ldap.searchFilter (&(objectClass=organizationalPerson)(memberOf=cn=IM,cn=Users,dc=turizm,dc=local))(&(objectClass=user)(!(objectClass=computer))(!(userAccountControl=514))(!(userAccountControl=546))(!(userAccountControl=66050)))
ldap.sslEnabled false
ldap.usernameField sAMAccountName
ldap.vcard-mapping
<N>
<GIVEN>{cn}</GIVEN>
</N>
<EMAIL>
<INTERNET/>
<USERID>{mail}</USERID>
</EMAIL>
<FN>{displayName}</FN>
<ADR>
<HOME/>
<STREET>{homePostalAddress}</STREET>
<PCODE>{homeZip}</PCODE>
<CTRY>{co}</CTRY>
</ADR>
<ADR>
<WORK/>
<STREET>{streetAddress}</STREET>
<LOCALITY>{l}</LOCALITY>
<REGION>{st}</REGION>
<PCODE>{postalCode}</PCODE>
<CTRY>{co}</CTRY>
</ADR>
<TEL>
<HOME/>
<VOICE/>
<NUMBER>{homePhone}</NUMBER>
</TEL>
<TEL>
<HOME/>
<CELL/>
<NUMBER>{mobile}</NUMBER>
</TEL>
<TEL>
<WORK/>
<VOICE/>
<NUMBER>{telephoneNumber}</NUMBER>
</TEL>
<TEL>
<WORK/>
<CELL/>
<NUMBER>{mobile}</NUMBER>
</TEL>
<TEL>
<WORK/>
<FAX/>
<NUMBER>{facsimileTelephoneNumber}</NUMBER>
</TEL>
<TEL>
<WORK/>
<PAGER/>
<NUMBER>{pager}</NUMBER>
</TEL>
<TITLE>{title}</TITLE>
<ORG>
<ORGUNIT>{department}</ORGUNIT>
</ORG>
</vCard>]]>"><![CDATA[
<vCard xmlns="vcard-temp">
<N>
<GIVEN>{cn}</GIVEN>
</N>
<EMAIL>
<INTERNET/>
<USERID>{mail}</USERID>
</EMAIL>
<FN>{displayName}</FN>
<ADR>
<HOME/>
<STREET>{homePostalAddress}</STREET>
<PCODE>{homeZip}</PCODE>
<CTRY>{co}</CTRY>
</ADR>
<ADR>
<WORK/>
<STREET>{streetAddress}</STREET>
<LOCALITY>{l}</LOCALITY>
<REGION>{st}</REGION>
<PCODE>{postalCode}</PCODE>
<CTRY>{co}</CTRY>
</ADR>
<TEL>
<HOME/>
<VOICE/>
<NUMBER>{homePhone}</NUMBER>
</TEL>
<TEL>
<HOME/>
<CELL/>
<NUMBER>{mobile}</NUMBER>
</TEL>
<TEL>
<WORK/>
<VOICE/>
<NUMBER>{telephoneNumber}</NUMBER>
</TEL>
<TEL>
<WORK/>
<CELL/>
<NUMBER>{mobile}</NUMBER>
</TEL>
<TEL>
<WORK/>
<FAX/>
<NUMBER>{facsimileTelephoneNumber}</NUMBER>
</TEL>
<TEL>
<WORK/>
<PAGER/>
<NUMBER>{pager}</NUMBER>
</TEL>
<TITLE>{title}</TITLE>
<ORG>
<ORGUNIT>{department}</ORGUNIT>
</ORG>
</vCard>]]>
locale.timeZone Europe/Moscow
passwordKey hidden
provider.admin.className org.jivesoftware.openfire.admin.DefaultAdminProvider
provider.auth.className org.jivesoftware.openfire.ldap.LdapAuthProvider
provider.authorization.classList org.jivesoftware.openfire.sasl.StrictAuthorizationPolicy org.jivesoftware.openfire.sasl.DefaultAuthorizationPolicy
provider.group.className org.jivesoftware.openfire.ldap.LdapGroupProvider
provider.lockout.className org.jivesoftware.openfire.lockout.DefaultLockOutProvider
provider.securityAudit.className org.jivesoftware.openfire.security.DefaultSecurityAuditProvider
provider.user.className org.jivesoftware.openfire.ldap.LdapUserProvider
provider.vcard.className org.jivesoftware.openfire.ldap.LdapVCardProvider
register.inband false
register.password hidden
sasl.mechs ANONYMOUS,PLAIN,NTLM
sasl.realm WINSERVER
update.lastCheck 306842792609
update.notify-admins true
update.proxy.port -1
update.service-enabled false
xmpp.auth.anonymous true
xmpp.auth.sharedSecretEnabled true
xmpp.client.idle 360000
xmpp.client.idle.ping true
xmpp.client.tls.policy disabled
xmpp.domain winserver
xmpp.filetransfer.enabled true
xmpp.offline.quota 102400
xmpp.offline.type store
xmpp.proxy.enabled false
xmpp.server.certificate.accept-selfsigned false
xmpp.server.dialback.enabled false
xmpp.server.socket.active false
xmpp.server.tls.enabled false
xmpp.session.conflict-limit 0
xmpp.socket.ssl.active false
Пандион установлен 2.6.106 стабильная