AD nested groups

[Tunturi Timo]

On 25/07/17 18:00, Hong Ye wrote:
> Does anyone know how to get all the AD group membership including nested 
> groups for a user in AttributeResolver? I tried the solution below, but 
> it’s very slow. Is there any other solution?

Other than using a search base as narrow as possible and adding some 
indexed attributes like "(objectCategory=group)(objectClass=group)" to 
your search filter there probably isn't a lot you can do to speed things up.

How slow is very slow?

-- Timo Tunturi