To determine the set of all dynamic groups in which a user is a member, first perform a search to find all dynamic group entries defined in the server. You can do this using a subtree search with a filter of "(objectClass=groupOfURLs)".

You should retrieve the memberURL attribute so that you can use the logic described in the previous section to determine whether the specified user is a member of each of those groups. For example, to find the set of all dynamic groups defined in the dc=example,dc=com tree, issue a search with the following criteria:
Base DN dc=example,dc=com
Scope sub
Filter (objectClass=groupOfURLs)
Requested Attributes memberURL

Each entry returned will be a dynamic group definition. You can use the base, scope, and filter of its memberURL attribute to determine whether the user is a member of that dynamic group.