LDAP查询组中的组

Question

Is there a good way to write an LDAP query that checks group memberships recursively? I have a custom attribute on a group that contains a list of objects (users and groups). My query works fine for users.

Existing stripped down query

(&(myList=cn=usr23453))

where myList is a multi-value DN.

I apologize for use of incorrect terms and so on. AD and LDAP programming is kinda new to me.

Thanks

Answer 1

Not clear what you are tying to do, but, To Resolve nested security groups:

(memberOf:1.2.840.113556.1.4.1941:=CN=user,CN=Users,DC=DOM,DC=NT)

Where CN=user,CN=Users,DC=DOM,DC=NT is the Fully Distinguished name of a user entry.

-jim