lots of ways of doing this… what Mark notes is one way.
if you don’t have memberOf or isMemberOf attributes managed: obtain DN of object in
question. Search for
(|(&(objectclass=groupOfNames)(member=USERDN))(&(objectclass=groupOfUniqueNames)(uniquemember=USERDN)))
if a user is a member of a lot of groups, then adjust the search limits upward for the DN
performing the search.
also, have a look at grouper -
https://spaces.internet2.edu/display/Grouper/
<
https://spaces.internet2.edu/display/Grouper/> if you are interested in a
full-blown groups/permissions management environment. Developed for Higher Ed, by Higher
Ed. There is really nothing else like it, unfortunately.
hope this helps.
/mrg
On Apr 6, 2015, at 10:58 AM, Mark Reynolds
<mareynol(a)redhat.com> wrote:
On 04/06/2015 10:28 AM, harry.devine(a)faa.gov <mailto:harry.devine@faa.gov> wrote:
> I know this is slightly off topic, but I thought that maybe someone on this list
could be of some assistance. I need to get the list of groups that a particular user
belongs to, similar to the linux command line program ‘groups’. I would like to provide a
user name to search, and have all groups that this user belongs to be returned. Is this
possible in 389-ds? I have been Googling for days and most results that I come up with
have to do with Windows Active Directory, or other custom LDAP implementations.
Just use ldapsearch with a proper filter:
"(|(member=USERNAME)(uniquemember=USERNAME))"
You could use the memberof plugin to make this much easier - where the plugin will add
the "memberOf" attribute to each user entry, and display all the groups that use
belongs to:
dn: uid=USERNAME,dc=example,dc=com
...
memberOf: cn=group1,dc=example,dc=com
memberOf: cn=group29,dc=example,dc=com
https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/9....
<
https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/9....
Note - you will need to run the "memberof fixup task" to generate these
attributes on existing entries.
Mark
>
> Thanks for any help!
> Harry
>
> Harry Devine
> DOT/FAA/AJM-2413
> Common ARTS Software Development
> harry.devine(a)faa.gov <mailto:harry.devine@faa.gov>
> (609)485-4218
>
>
>
> --
> 389 users mailing list
> 389-users(a)lists.fedoraproject.org <mailto:389-users@lists.fedoraproject.org>
>
https://admin.fedoraproject.org/mailman/listinfo/389-users
<
https://admin.fedoraproject.org/mailman/listinfo/389-users>
--
389 users mailing list
389-users(a)lists.fedoraproject.org <mailto:389-users@lists.fedoraproject.org>
https://admin.fedoraproject.org/mailman/listinfo/389-users
<
https://admin.fedoraproject.org/mailman/listinfo/389-users>