How to write LDAP query to test if user is member of a group?

by

You should be able to create a query with this filter here:

(&(objectClass=user)(sAMAccountName=yourUserName)
  (memberof=CN=YourGroup,OU=Users,DC=YourDomain,DC=com))

and when you run that against your LDAP server, if you get a result, your user “yourUserName” is indeed a member of the group “CN=YourGroup,OU=Users,DC=YourDomain,DC=com

Try and see if this works!

If you use C# / VB.Net and System.DirectoryServices, this snippet should do the trick:

DirectoryEntry rootEntry = new DirectoryEntry("LDAP://dc=yourcompany,dc=com");

DirectorySearcher srch = new DirectorySearcher(rootEntry);
srch.SearchScope = SearchScope.Subtree;

srch.Filter = "(&(objectClass=user)(sAMAccountName=yourusername)(memberOf=CN=yourgroup,OU=yourOU,DC=yourcompany,DC=com))";

SearchResultCollection res = srch.FindAll();

if(res == null || res.Count <= 0) {
    Console.WriteLine("This user is *NOT* member of that group");
} else {
    Console.WriteLine("This user is INDEED a member of that group");
}

Word of caution: this will only test for immediate group memberships, and it will not test for membership in what is called the “primary group” (usually “cn=Users”) in your domain. It does not handle nested memberships, e.g. User A is member of Group A which is member of Group B – that fact that User A is really a member of Group B as well doesn’t get reflected here.

Marc

More Related Contents:

  1. “Cast” a String Attribute to String Java [duplicate]
  2. I can’t install python-ldap
  3. Can PostgreSQL have a uniqueness constraint on array elements?
  4. Authenticating against Active Directory with Java on Linux
  5. ldap nested group membership
  6. LDAP: error code 49 – 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1
  7. ASP.NET Core 2.0 LDAP Active Directory Authentication
  8. What are CN, OU, DC in an LDAP search?
  9. Adding and removing users from Active Directory groups in .NET
  10. How to get all the AD groups for a particular user?
  11. Authenticating against active directory using python + ldap
  12. Using LDAP for authentication in iOS
  13. How do I resolve “WILL_NOT_PERFORM” MS AD reply when trying to change password in scala w/ the unboundid LDAP SDK?
  14. Authenticating in PHP using LDAP through Active Directory
  15. What happens on the wire when a TLS / LDAP or TLS / HTTP connection is set up?
  16. LDAP root query syntax to search more than one specific OU
  17. Querying an LDAP
  18. How to connect with Java into Active Directory
  19. Display thumbnailPhoto from Active Directory in PHP
  20. How do a LDAP search/authenticate against this LDAP in Java
  21. .Net’s Directory Services throws a strange exception
  22. Active Directory (LDAP) – Check account locked out / Password expired
  23. What is the LDAP filter string length limit in Active Directory?
  24. Connecting to LDAP from C# using DirectoryServices
  25. How do I validate Active Directory creds over LDAP + SSL?
  26. Authenticating users using Active Directory in Client-Server Application
  27. Using C# to authenticate user against LDAP
  28. How to get the current user’s Active Directory details in C#

Leave a Comment