vudex

@rcritten just tried this, unfortunately it didn't work. for now the only thought is to follow the trace message of `ipa -d ping` and dig some info from source code

[This](https://github.com/dexidp/dex/discussions/2809) helped me in FreeIPA. It works if in your scheme groups are resolved in user entry. It uses legacy settings though, I encourage maintainers to not get rid of...

[This discussion](https://github.com/dexidp/dex/discussions/2809) helped me. I use FreeIPA, where all groups are already resolved in `memberOf` attribute of user entry. this is my final settings: ``` groupSearch: baseDN: cn=groups,cn=accounts,dc=vdz,dc=novalocal filter: "(|(objectClass=posixGroup)(objectClass=groupOfNames))"...