Filter usergroups

[andhure]

Hello,

Is there way to filter the usergroups so that only required usergroup is received? For example, if I want usergroups of a user that contains "ABC_", can I provide some options to retrieve only those? Right now, it has to be retrieved and filtered and it can cause performance issues if large groups are present and there are frequent calls?

Regards
Ajith

[RyanHirsch]

We are seeing similar issues right now for users with membership to many groups. It looks like each group is being looked up which is resulting in our app effectively DoS'ing our domain controller.
Is there any work around that can be done at the application level, or is our best bet to issue a LDAP query directly instead of leveraging "retrieveGroups"?

Thank you

[abbr]

I haven't found a suitable win api that accepts group filters. Even though I can do a post-retrieval filter in NodeSSPI, I don't think it helps solving your problem so yes, the best bet for now is disabling retrieveGroups and installing a LDAP module to filter.

[happykmm]

@abbr How to use LDAP module? Could you please give a demo?

Thanks!

[abbr]

@suro1995 , I haven't tried but take a look at node-activedirectory

[happykmm]

@abbr Thanks for providing the module so much!
I also found out an alternative way using powershell: https://technet.microsoft.com/en-us/library/ee617193.aspx