To determine the set of all dynamic groups in which a user is a member, first perform
a search to find all dynamic group entries defined in the server. You can do this
using a subtree search with a filter of
memberURLattribute so that you can use the logic described in the previous section to determine whether the specified user is a member of each of those groups. For example, to find the set of all dynamic groups defined in the dc=example,dc=com tree, issue a search with the following criteria:
Each entry returned will be a dynamic group definition. You can use the base, scope,
and filter of its
memberURL attribute to determine whether the user
is a member of that dynamic group.