show users in group:

ldapsearch -h <mycorp>.<mydomain> -x -p 389 -b "OU=<start search ou>,DC=<mycorp>,DC=<mydomain>" -D  "cn=<read access user>,OU=<start search ou>,DC=<mycorp>,DC=<mydomain>" -w <mypasswd> -L "(memberOf=CN=<mygroup>,OU=<start search ou>,DC=<mycorp>,DC=<mydomain>)" | grep sAMAccountName: | sed 's/sAMAccountName: //'