ldap - "base_dn" can`t get members of security group

[reinkison]

hello everybody,
i am using now ldaprecord and it is really a very cool thing :)

so far - i have a litte problem (or a uncorrect understanding) - so maybe you can help me.
i`ve defined a "base_dn" to connect to our Microsoft AD.

if i import with this "base_dn" all the users from "03_Benutzer" are imported correctly and everything is fine :)

but when i change the "base_dn" to read all members of a "security group" in my AD - i got nothing to import:

so - in this case i would like to read out all users from the security group and not from the organization unit.
can anybody let me know - how can i fix this to get the users from the security group?!

kind regards,
reinki

[stevebauman]

Hi @reinkison! I’m glad you’ve found LdapRecord useful!

Unfortunately you won’t be able to use the groups base DN to import all of its members. A group isn’t of a “container” type, so your search results will return null.

You will have to apply a global scope to your LdapRecord User model that filters your search results to users whom are members of the security group:

https://ldaprecord.com/docs/laravel/v2/usage/#scopes

https://ldaprecord.com/docs/core/v2/active-directory/users#checking-existence

I’m on my phone at the moment so I cannot provide you direct examples, but the above links should get you started! I’ll post an example in a bit 👍