How do I query an organizational unit for its groups with LDAP?

Question

I have tried many queries, but this gets me my OU:

(&(objectCategory=organizationalUnit)(Name=MyOU)) (I just get the ou here)

I tried to use (&(objectCategory=organizationalUnit)(objectClass=group)(Name=MyOU)) but failed.

Also, (&(objectCategory=Group)(cn=MyOU,dc=mytop,dc=mysuffix)) and failed.

I am trying to get the groups within the OU. I have searched a lot but cannot come up with it. How do I find the groups within the OU? I have a routine that will print out the groups. I just can't get the query right.

Thank you for any help.

Answer 1

Try specifying a searchbase instead of adding it to the query. From ldapsearch, you'd do this:

-s dc=MyOU,dc=com your searchbase may vary

From vb, you'd specify it in the object:

DirectoryEntry("LDAP://server IP//DC=MyOU,DC=com"...

From there, the filter (objectclass=group) should get you what you need.

Answer 2

cn=MyOU,dc=mytop,dc=mysuffix does not go in the filter - this is the Base DN of your search.

The filter you need is just (objectClass=group).