`dsget group` fails with object class does not match command line

view full story

http://serverfault.com – I'm trying to retrieve information about members of an active directory group using dsget. The command retrieves some but not all members (53 of 141). The problem group contains a child group. The same command syntax with other groups not having a child group is successful. Docs for dsget make it clear quering sub groups is expected to work. dsget group "CN=MyGroup,OU=Users and Groups,DC=example,DC=ca" -members -expand -c | dsget user -samid -display dsget failed:CN=SomeChildGroup,OU=Users and Groups,DC=example,DC=ca:The object class of the target does not match the one specified on the comm (HowTos)