On 10.03.2014, at 14:57, Stephen Connolly <[email protected]> 
wrote:

> the lack of nested group support in LDAP causes lots of people to run back 
> again.

In small Active Directories it should be possible to use 
LDAP_MATCHING_RULE_IN_CHAIN to get recursive group membership resolution.

Something like the following should work as group membership filter:
(member:1.2.840.113556.1.4.1941:=(cn={0}))

Unfortunately, the AD I'm using is too large, so it always timeouts.

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to