use sAMAccountName instead of CN

models/ldap.go

@@ -266,11 +266,13 @@ func GetGroupsOfUser(username string, baseDN string, conn *ldap.Conn) ([]string,
 	searchRequest := ldap.NewSearchRequest(
 		baseDN,
 		ldap.ScopeWholeSubtree, ldap.NeverDerefAliases, 0, 0, false,
-		fmt.Sprintf("(CN=%s)", ldap.EscapeFilter(samAccountName)),
+		fmt.Sprintf("(sAMAccountName=%s)", ldap.EscapeFilter(samAccountName)),
 		[]string{},
 		nil,
 	)
 
+	fmt.Printf("searchRequest: %v\n", searchRequest)
+
 	sr, err := conn.Search(searchRequest)
 	if err != nil {
 		return nil, err