checkADGroupMembership.php

function checkADGroup($adLDAPHost, $ldap_dn, $queryUser, $queryPassword, $user, $group) {
   // Connect to AD
   $ldap = ldap_connect($adLDAPHost) or die("Could not connect to LDAP");
   ldap_bind($ldap,$queryUser,$queryPassword) or die("Could not bind to LDAP");
 
   // Search AD
   $results = ldap_search($ldap,$ldap_dn,"(samaccountname=$user)",array("memberof","primarygroupid"));
   $entries = ldap_get_entries($ldap, $results);
	
   // No information found, bad user
   if($entries['count'] == 0) return false;

   // Get groups and primary group token
   $output = $entries[0]['memberof'];
   if (in_array($group, $output)) {
      return 1;
   } else {
      return 0;
   }
}