To determine all members of a dynamic group, issue a search using the base, scope,
and filter of the member URL.
Note:
The set of requested attributes should reflect the attributes desired from the member user entries or "1.1" if no attributes are needed.
This table contains the search criteria to retrieve the list of all members of the
group dc=example,dc=com
with the cn and
mail attributes.
Base DN |
|
Scope |
|
Filter |
|
Requested Attributes |
|
CAUTION:
This search might be extensive if the associated filter is not indexed or if the group contains a large number of members.
$ bin/ldapsearch --baseDN "dc=example,dc=com" \
--searchScope sub "(employeeType=contractor)" "cn, mail"