There are two common ways of representing group membership in LDAP.
-
User entries can hold membership information as attribute.
To use this simply specify the name of the attribute that holds
the group information.
-
Group entries can hold a list of their members as attribute.
You can specify a search context and filter to find all groups
that the user should be considered a member of. Typically this
involves filtering groups by looking for the user's DN on a
group attribute.