Reputation: 928
Is there a good way to write an LDAP query that checks group memberships recursively? I have a custom attribute on a group that contains a list of objects (users and groups). My query works fine for users.
Existing stripped down query
(&(myList=cn=usr23453))
where myList is a multi-value DN.
I apologize for use of incorrect terms and so on. AD and LDAP programming is kinda new to me.
Thanks
Upvotes: 1
Views: 384
Reputation: 10986
Not clear what you are tying to do, but, To Resolve nested security groups:
(memberOf:1.2.840.113556.1.4.1941:=CN=user,CN=Users,DC=DOM,DC=NT)
Where CN=user,CN=Users,DC=DOM,DC=NT is the Fully Distinguished name of a user entry.
-jim
Upvotes: 0