Hi,

Sorry if the top is not closely PHP related.  But I need to accomplish it
using PHP.

I can query the attribute 'memberOf' of a user from the active directory
server with no problem.  The challenge I'm facing now is how to obtain all
the groups a user is member of.  In many cases, a user can be in many
groups which could be nested.  Say, user is a member of group B which is a
member of group A.  So user should be member of group A implicitly.  But
in active directory, user's account only has

memberOf:  CN=Group_B,OU=security groups,OU=Users,OU=Coll,DC=some,DC=edu

I can then check if Group_B's LDAP entry has any 'memberOf' attribute, so
on and so on.  If user's LDAP entry has multiple 'memberOf' attributes, I
have to check each one to see if each group has any parent groups. 
Anybody ever had to deal with such a kind of issue and would like to shed
some light (better with some code samples) how it should be done
effectively?  Any ideas would be greatly appreciated.

Thanks,

Bing

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to