From: "Ball, Donald A Jr (Library)" <donald.ball@...>
Date: 2007-04-20T02:21:28+09:00
Subject: Re: ruby scripting on microsoft active directory plus exchange

> There is an attribute called memberof which has a list of all 
> the groups the user account belongs to.  You should be able 
> to call memberof on your returned LDAP object and get an 
> array with the groups in it.

That works great, thanks! A quick followup if you don't mind: if I'm
trying to authenticate a user and see if she belongs to either of two
groups, say, is it better to search twice against two different
treebases and simply see if either returns a match, or search in the
nearest common ancestor and check the memberof attribute?

- donald