I'm trying to setup SelfService group management. We have multiple Forests. Because of the Forests we can't add users from a different forest to the ManagedBy. We can add a local security group and do group nesting of a global group from the other forest though.
I'm trying build an ldap query for a business unit that will list the groups a user is allowed to manage. Since it's a group that is in the ManagedBy I need to get that first then find if the user is a memberof that group and then have it display in the Business Unit.
I'm not great with LDAP and seem to be finding it difficult to build this kind of query if it's even possible.
Any suggestions would help.
Current Query for Business Unit, there are two different ones:
These get the manageBy if the DN of the user is a member. I'm having a hard time trying to figure out how to get the managedBy Group first then find if the users %distinguishedName% is a member of that group.
If seems like my queries end up getting all the groups a user is a memberof or nothing at all. :)