![]() ![]() This option works OK but in practice querying all users in your directory is too expensive and slow. Enumerate every user in your directory and check their “memberOf” to see if they are a member of the group in question giving access to their other attribute(s).Two solutions are of the more brute force type which give complete solutions but poor performance. What are our options for doing this? Fetch Active Directory Group Members Complete Solution, but Poor Performance This would get us more user attributes for display. We would like to query the “member” attribute and join these results with the user objects. Active Directory is Not a Relational DatabaseĪctive Directory isn’t a relational database and this is one place where one would wish that it acted like one. ![]() There isn’t a solution which will meet every need all the time. (Not only their distinguished name which wouldn’t be very friendly or their CN which isn’t always useful.) The techniques about how best to do this are discussed in this article. PeopleUpdate, part of Web Active Directory’s PeoplePlatform, gives administrators the power to configure user display by any of their attributes (for example their email address) when users are perusing or editing members of a group. Querying the “member” attribute of a group in Active Directory or other LDAP directories returns the user’s distinguished name. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
December 2022
Categories |