ldap query for group members

Question

Hi Gods,

I try to make an ldap query, to get a list from all my groups/members. I can't figure out how can i do this. All my try unsuccesfull.

My "AD tree": mydomain.local/Mybusiness/Distribution Groups/ here are my groups

I tried with somethin' like this:

(objectCategory=user)(memberOf=CN=Distribution Groups,OU=Mybusiness,DC=mydomain.local,DC=com)

I appritiate if somebody could help me to write an ldap query, which give a list with my groups and the members of this groups.

Thank you.

Answer 1

Active Directory does not store the group membership on user objects. It only stores the Member list on the group. The tools show the group membership on user objects by doing queries for it.

How about:

(&(objectClass=group)(member=cn=my,ou=full,dc=domain))

(You forgot the (& ) bit in your example in the question as well).