[python-ldap] Can i check if the group exist in active directory using python ldap

Michael Ströder michael at stroeder.com
Sun Sep 11 09:05:16 EDT 2016


Sebastian Wiesner wrote:
> This is not hard to elaborate on. The group objects in our directory don't
> have objectClass group, instead they have posixGroup.

In MS Active Directory?

> Is it best practice to not use DN
> parts inside filter criteria?

Yes, if you want to implement generic LDAP clients supporting a wide range of
different LDAP server deployments.

If one is looking for good examples there are some client implementations doing
this right with sufficiently but not overwhelming client-side configuration:
Jira/Confluence, jenkins...

Ciao, Michael.


More information about the python-ldap mailing list