Has anyone tested LDAP auth with nested bluegroups with Websphere?
Only users in a top level group can succesfully authenticate on my
server at this time. Users in a subgroup fail with the error message
"Your account does not belong to the groups that are authorized
to access the Web UI. Please contact your server
administrator."

Have I missed a setting in Websphere to make this work?

Thanks

I just tried nested LDAP user groups for one of my RTC instance -
using Microsoft Active Directory server. Users in the nested groups
were not 'recognized' by RTC.

The LDAP groups looked like this:
MyJazzAdminUsers
...user1
...user2
...Group1
......user3
......user4
...Group2
MyJazzUsers

Users 3 and 4 in this case do not have admin right for the Jazz repo.

We may be able to map more than one LDAP group to JazzAdminUser role,
for example. But, this needs restarting Tomcat, I think.

Is it possible for the RTC-LDAP configuration to recursively search
users under a specific LDAP group? Thanks.

I 'think' RTC lacks the capability to define the search scope on LDAP
servers. Take ClearQuest as an example, CQ-LDAP configuration has
one parameter to deifne ".... the scope of the search from the
base DN?: sub (subtree); one (one level below); or base (base DN
only). ..." (quote from Rational ClearQuest document). A
parameter for searching scope seems missing in RTC.

Could you please confirm? Thanks.