Get external group membership by querying group object instead of searching I for isMemberOf or memberOf

This is a request regarding how members of groups are found when using external groups. We setup external group synchronization (I are using Critical Path Directory Server) and the groups were found but no members were found for the groups.

As to why the members of the group cannot be found, the short answer is I don't use the memberOf attribute so our ldap search for finding members of groups won't work for them.

Instead, the way to find members of groups is to look at the group object itself and then find the "member" attribute (multi-valued attribute - one for each user that is part of the group).

Here's my understanding of the 2 different ways to find members of groups:

1. The way we do it - look in the context names that are specified and do a search like (&(objectClass=person)(memberOf=DN_of_group))

2. The other way to do it (that we don't do but I say is more generic) - look in the group object itself and get all of the "member" values which is a list of all of I in the group.

The enhancement request is to support the second method of finding group membership as well.