bsharath
asked on
Via Ldap how can i retrieve all group members?
Hi,
Via Ldap how can i retrieve all group members?
So can use as a query in AD.
Thanks
Via Ldap how can i retrieve all group members?
So can use as a query in AD.
Thanks
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
When people refer to a DN, or distringuishedName, in Active Directory, it is the fully qualified name structure, as in
memberOf=CN=IUK,OU=SecondO U,OU=First OU,DC=doma in,DC=com
Rob.
memberOf=CN=IUK,OU=SecondO
Rob.
ASKER
Thanks Rob it does work
Can we just give the group name rather than whole
Can we just give the group name rather than whole
not via an ldap query using memberof, you need then entire DN
thanks
Mike
thanks
Mike
ASKER
Any other ways?
The only other way is via a script, or the command line tools, I think something like
dsquery group domainroot -name iuk* | dsget group -members
Rob.
dsquery group domainroot -name iuk* | dsget group -members
Rob.
If you get
dsget failed:`Target object for this command' is missing.
that means that the dsquery did not find a group name matching your string value.
Rob.
dsget failed:`Target object for this command' is missing.
that means that the dsquery did not find a group name matching your string value.
Rob.
are you just trying to run queries against AD? Can you use third party (free) tools also?
ASKER
I want it via the AD queries
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
But does not work
(&(&(objectcategory=person
IUK is the group name