25 Apr
2014
25 Apr
'14
9 a.m.
On 25/04/14 12:11, Arran Cudbard-Bell wrote:
Again 'Woha'.
AD allows bitwise filters?! That's pretty cool.
Someone with AD want to test and see if it allows the string form?
Not sure what you mean by "string form". You can definitely do a plain old LDAP query with that syntax. Couple of things to note - the "find all groups a user is in" form is *very* slow for me. The "find if a user is in a group" requires a base DN search against the user object, just like the tokenGroups magic attribute (I assume it does the same thing under the hood).