puzzled confused
puzzled confused

Reputation: 171

ldap search filter query to extract user group information

Currently in my deployment, I only want to extract user-group information as part of search query. As of now I am doing top level search, this results in downloading complete LDAP user-profile information from LDAP server. This is kind of an overhead. So is it possible to include a search filter in the search query that can give me the direct user-group membership alone and not the complete user-profile?

Upvotes: 0

Views: 1255

Answers (1)

jwilleke
jwilleke

Reputation: 10976

The "member" attributes on groups will provide the DN of all members of the group.

If you are looking at the user vs the group, there is no standard for seeing groups relations for the user. (AD and eDirectory) support this to some degree.

Nested groups in you LDAP can cause more work to find user-group relations.

Upvotes: 1

Related Questions