Active Directory Member Resolver

The Active Directory Member Resolver is based on the code of the original "Active Directory Group Resolver" except it resolves each group member's 'saMAccountName' attribute individually via their DN. This overcomes the limitation whereby all of the 'person' entries had to exist within a given location to be resolved.

It is important to note that the resolver will cache the mapping between the userDN and the resolved 'saMAccountName' attribute, to avoid performing an n+1 lookup of members on each invocation. Hence there will be a permanent memory overhead associated with this resolver, as cached values will only be cleared if they are removed from the group. The group member listing operation itself is not cached, being always performed against the LDAP.

The ldap connector must be added to your process dependencies.