• To determine all members of a dynamic group, issue a search using the base, scope, and filter of the member URL.
    Note:

    The set of requested attributes should reflect the attributes desired from the member user entries or "1.1" if no attributes are needed.

    This table contains the search criteria to retrieve the list of all members of the group dc=example,dc=com with the cn and mail attributes.

    Base DN

    dc=example,dc=com

    Scope

    sub

    Filter

    (employeeType=contractor)

    Requested Attributes

    cn, mail
    CAUTION:

    This search might be extensive if the associated filter is not indexed or if the group contains a large number of members.

    $ bin/ldapsearch --baseDN "dc=example,dc=com" \
  --searchScope sub "(employeeType=contractor)" "cn, mail"