Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I am certainly not Cisco expert, but from a LDAP perspective, I do not think the memberOf attribute will be reliable.memberOf is an operationanal, (ie not user updatable), server side set recirpical value of the member Attribute from the group entry....