Determining the members of a dynamic group

Steps

To determine all members of a dynamic group, issue a search using the base, scope, and filter of the member URL.

The set of requested attributes should reflect the attributes desired from the member user entries or "1.1" if no attributes are needed.

Example:

This table contains the search criteria to retrieve the list of all members of the group dc=example,dc=com with the cn and mail attributes.

Base DN

dc=example,dc=com

Scope

sub

Filter

(employeeType=contractor)

Requested Attributes

cn, mail

Example:

This search might be extensive if the associated filter is not indexed or if the group contains a large number of members.
```
$ bin/ldapsearch --baseDN "dc=example,dc=com" \
  --searchScope sub "(employeeType=contractor)" "cn, mail"
```