ObjectGroups about go-ad-auth HOT 1 CLOSED

Yes, I think you have the right idea. ObjectGroups can match on any attribute including the DN. For example you could match on the mail attribute:

groups, err := conn.ObjectGroups("mail", "[email protected]", []string{"CN=Example Group,OU=Groups,DC=example,DC=com"})
if err != nil {
    //handle err
}
fmt.Println(groups)

//assuming user is in the group
//output:
//[CN=Example Group,OU=Groups,DC=example,DC=com]

You can use the attr dn and the user DN as the value as well:

groups, err := conn.ObjectGroups("dn", "CN=Kory Prince,OU=Accounts,DC=example,DC=com", []string{"CN=Example Group,OU=Groups,DC=example,DC=com"})

If you're not getting any groups returned then either:

• The user is not in the group or nested group (nested groups requires at least v3.1.0)
• The group does not exist under your Config.BaseDN

My guess is probably the second one.

from go-ad-auth.