AlwaysFilter using nested groups

[cyr0nk0r]

I am attempting to use the following

AlwaysFilter => '(memberOf:1.2.840.113556.1.4.1941:cn=All Staff Users,ou=Office,dc=MyDomain,dc=com)',

as documented here:
http://msdn.microsoft.com/en-us/library ... 85%29.aspx

However the filter is not working.

The goal is to filter such that only users that are part of group "All Staff Users" are indexed in OTRS as customers. All Staff Users however is a nested group so no users are specifically defined as being members of All Staff Users, they are instead members of dozens of other groups... however all those groups are a member of All Staff Users.

I'm not sure why OTRS can't filter recursively.

[cyr0nk0r]

my fault. My syntax was bad.
It should be:

AlwaysFilter => '(memberOf:1.2.840.113556.1.4.1941:=cn=All Staff Users,ou=Office,dc=MyDomain,dc=com)',

[root]

the LDAP module doesn't work recursive. But I'm using an own module, available at https://github.com/rkaldung/ConnectAD.
Please feel free to use it, any feedback is welcome.