any examples of using nesting within `require group` ?

[ibexmonj]

Currently, If i specify the ldap url like so with the "require valid_user" param it works.

url "ldaps://ldap.test.domain.com/OU=Users,DC=test,DC=domain,DC=com?sAMAccountNam e?sub?(&(memberOf:1.2.840.113556.1.4.1941:=CN=testgroup,OU=LDAP,OU=Groups,DC=test,DC=domain,DC=com)(objectClass=person))"; binddn "...."; binddn_passwd "...."; group_attribute member; group_attribute_is_dn on; satisfy any; require valid_user;

But, if i use the same group with the "require group attribute" like below i am unable to authenticate. Is the ldap rule chain (memberOf:1.2.840.113556.1.4.1941) supported with "require group" - is that what is missing here ?

url "ldaps://ldap.test.domain.com/OU=Users,DC=test,DC=domain,DC=com?sAMAccountNam e?sub?(objectClass=person)"; binddn "...."; binddn_passwd "...."; group_attribute member; group_attribute_is_dn on; satisfy any; require group "CN=testgroup,OU=LDAP,OU=Groups,DC=test,DC=domain,DC=com";

[onovy]

Try this:

        group_attribute "member:1.2.840.113556.1.4.1941:";

which works for me.