Feature Request: Provide a stream for group members?

[tfrancois]

I have found the stream capability of the user search an invaluable and unique way to handle large AD queries, and was wondering if there was a way to have a stream object be returned for group members of a given group? Thanks!

[wickning1]

Two potential conflicts with providing a .groupMembers() function:

• Not all LDAP implementations maintain memberOf, so I probably would have to avoid relying on it. That would make .groupMembers() take two round trips - one for the group (and its member property), and a second to search/stream the members. Most users would be better off doing a search based on memberOf after confirming that their target service supports it.
• Some group members are groups. We would need to provide a recursive and non-recursive version of .groupMembers() and provide cycle protection when recursive. Doable, but a little bit of work.

[wickning1]

I took a stab at this and published it in 2.1.0, but it's hard to fully test against openldap. It's more of a beta feature. getMembers() is documented but there is also getMemberStream().

[wickning1]

I went ahead and made it always recursive if it finds subgroups. It's hard to imagine why you'd want to ignore subgroups. It does have cycle detection to avoid infinite loops.

[tfrancois]

Wow - I just saw this update! I have a Windows AD instance and a Samba/OpenLDAP instance and will test against both in the next couple of days and report back if I find any issues! Thank you for continuing to support this excellent lib!