Could I ask if you are using domain specific backends (e.g. default in SQL and another domain in LDAP, or two different LDAPs)? What we don't allow is group membership across such backend technology boundaries.
Could I ask if you are using domain specific backends (e.g. default in SQL and another domain in LDAP, or two different LDAPs)? What we don't allow is group membership across such backend technology boundaries.