https://community.splunk.com/t5/All-Apps-and-Add-ons/ldapsearch-is-not-returning-the-last-group-name-in-memberOf/m-p/648874#M79370 <P>I have noticed that when search for the list of groups a specific user is memberOf the search is not returning the first group a user is memberOf in the AD.</P><P>&nbsp;</P><P>In the screenshot below, you notice the group "Domain Users" is not in the list of membersOf although this group is default for all domain user. The group show up in the list when querying the user in AD.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2023-07-01 123243.png" style="width: 952px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/26102iFF9194B9A2642B85/image-size/large?v=v2&amp;px=999" role="button" title="Screenshot 2023-07-01 123243.png" alt="Screenshot 2023-07-01 123243.png" /></span></P> Sat, 01 Jul 2023 18:54:59 GMT ed86 2023-07-01T18:54:59Z https://community.splunk.com/t5/All-Apps-and-Add-ons/ldapsearch-is-not-returning-the-last-group-name-in-memberOf/m-p/648874#M79370 <P>I have noticed that when search for the list of groups a specific user is memberOf the search is not returning the first group a user is memberOf in the AD.</P><P>&nbsp;</P><P>In the screenshot below, you notice the group "Domain Users" is not in the list of membersOf although this group is default for all domain user. The group show up in the list when querying the user in AD.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2023-07-01 123243.png" style="width: 952px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/26102iFF9194B9A2642B85/image-size/large?v=v2&amp;px=999" role="button" title="Screenshot 2023-07-01 123243.png" alt="Screenshot 2023-07-01 123243.png" /></span></P> Sat, 01 Jul 2023 18:54:59 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/ldapsearch-is-not-returning-the-last-group-name-in-memberOf/m-p/648874#M79370 ed86 2023-07-01T18:54:59Z https://community.splunk.com/t5/All-Apps-and-Add-ons/ldapsearch-is-not-returning-the-last-group-name-in-memberOf/m-p/648875#M79371 <P>Question is not whether it shows in AD tools because they might interpret actual account data differently than you'd expect but whether "raw" ldapsearch run against AD returns the same values.</P><P>I'm no AD expert but I'm finding that the Domain Users membership is usually inferred not from the memberOf attribute but from the primaryGroup for given user.</P> Sat, 01 Jul 2023 19:04:15 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/ldapsearch-is-not-returning-the-last-group-name-in-memberOf/m-p/648875#M79371 PickleRick 2023-07-01T19:04:15Z