Namaste!

How to determine all the groups a user belongs to (including nested groups). in Java

I have an application that uses ActiveDirecotry authorisation and it has been decided that it needs to support nested AD groups.

MAIN_AD_GROUP
|
|-> SUB_GROUP
|
|-> User

My user is not directly member of (MAIN_AD_GROUP). Your help will be higly appricated.

http://stackoverflow.com/questions/570466/java-ldap-determine-if-user-in-a-given-group

http://stackoverflow.com/questions/11260704/how-to-get-all-ldap-groups-of-a-user-including-nested-groups-in-java

Hi Nepali8;

There is an application called apache directory studio which will help you determine all the attributes or membership of a user in ldap or you can use windows utility call dsquery (which you have to install in your computer).

What is the application that you are trying to integrate with ldap for authorisation to support nested group? Generally most of the application support nested group and you have to enable it via its directory configuration..

Regards
Sports freak

Hi sports freak,

I am building this login application using spring 4 , which has to authenticate against LDAP server, whether user is present in ldap server(in particular group or not/) . based upon that it needs to let the user to go access that application.

I have authenticated the user in ldap server. It is present in ldap server, now i need to make sure that same user is part of particular group or not?

lets take example.

user is memberof group A, Group A is member of Group B, now i need to find out if user is part of Group B or not?

Hope i clarify the my Task, please let me know more clarification is needed.

Thanks