Hello it's about connecting our AD and the groups there to Confluence, so that the AD groups can be used for permission control within Confluence.
Of course, the existing groups in AD should be used and the nested groups should also be used.
So, as I said. Wildcards don't work here because LDAP doesn't allow them. In Confluence, it's even more limited, because this query doesn't return anything. No idea why.
In short; LDAP (in AD) can read groups in groups, but then only in ONE named group:
(&(&(objectClass=group)(memberOf=CN=confluence-user,OU=Confluence,OU=Company,DC=en))))
Confluence can't do anything with it, but I don't know why. Because the technology is in AD, or so I thought.
What Confluence can do is read users from groups that are themselves members of a group:
(&(objectCategory=person)(objectClass=user)(memberOf:1.2.840.113556.1.4.1941:=CN=confluence-Test,OU=Confluence,OU=Company,DC=en))
