At 06:54 AM 7/5/2005, Howard Chu wrote: >> With some acls based like : > >But OpenLDAP does not recursively expand nested groups when doing ACL evaluation. At least when using the group construction. The FAQ has an example of nested groups using the set construction. http://www.openldap.org/faq/index.cgi?file=1133