title: Can LDAP_MATCHING_RULE_IN_CHAIN return 'subtree search results' with attributes (specifically "memberOf")?
body: <p>I have an active directory (AD) test instance with nested groups: Employees (Parent) with two subgroups: Executives and Engineers. </p>
  
  <pre><code>Tree:
    Employees
    |
    -Executives
    |   |
    |   -Mister Executive
    |
    -Engineers
        |
        -Joe Engineer
  </code></pre>
  
  <p>I see that the AD-extension LDAP_MATCHING_RULE_IN_CHAIN will search the subtree; I can search for all users who are employees with this query:</p>
  
  <pre><code>query:
  ( &amp; (objectClass=person)   (memberOf:1.2.840.113556.1.4.1941:=CN=Employees,CN=Users,DC=cloud,DC=com))
  </code></pre>
  
  <p><strong>The Problem: Recursive Search, but no Recursive Results</strong></p>
  
  <p>However, I cannot find a way to get the "subtree search results", i.e. while the query returns "Mister Executive" as an "Employee", the 'memberOf' attribute only lists "Executives", i.e. the group to which he directly belongs. I've checked all other attributes and don't see any 'employee'</p>
  
  <p><strong>Recap</strong></p>
  
  <p>So for final clarification: does AD allow any way to retrieve "subtree memberOf" results along with "subtree" LDAP_MATCHING_RULE_IN_CHAIN ("memberOf:1.2.840.113556.1.4.1941:=") searches</p>
  
  <p>thanks in advance,</p>