Header Only - DO NOT REMOVE - Extreme Networks

Does IDE 9.3.2 support nested groups in Active Directory?


Userlevel 1
I am trying to match group membership in IDE using a active directory group who's only member is another group. When the device authenticates, the record in IDE shows it is not a member of this nested group. Does IDE support nested groups in Active Directory?

1 reply

I imagine the answer is no. I would have to check internals but the query is likely a memberOf check which would only return the top level results, not the reference to the nested groups (which could be infinite)? We likely restrict the level to one.

Reply