Howard Chu wrote:
There are two common operations on a group: list all the members, and see if user X is a member of a group. For the first case, just retrieve the group entry and look at its member attribute. For the second case, just do a Compare on the group and test the member attribute against the user's DN.
A 3rd case is to search all the members of a group and retrieve the members' other attributes (like 'mail') in one search request.