Page created: 6 Nov 2019
|
Page updated: 25 Mar 2020
To determine the set of all dynamic groups in which a user is a member, first perform
a search to find all dynamic group entries defined in the server. You can do this
using a subtree search with a filter of
"(objectClass=groupOfURLs)
".
You should retrieve the
memberURL
attribute so that you can use the
logic described in the previous section to determine whether the specified user is a
member of each of those groups. For example, to find the set of all dynamic groups
defined in the dc=example,dc=com tree, issue a search with the
following criteria:Base DN | dc=example,dc=com |
Scope | sub |
Filter | (objectClass=groupOfURLs) |
Requested Attributes | memberURL |
Each entry returned will be a dynamic group definition. You can use the base, scope,
and filter of its memberURL
attribute to determine whether the user
is a member of that dynamic group.