Adding Groups in Delegated Directory setting

Question

I have setup a Delegated Active directory to the AD server using LDAP.

When the permission to 'Add/ Remove Group' is selected...

(i) Does adding a new group on this directory within Crowd create a local group in Crowd?

(ii) does Crowd get a read-only access to LDAP server?

(iii) Since I am not able to search and view the users or groups in LDAP, how can I create groups within Crowd and add users to it?

(What I am trying to do is create a delegated authentication directory and create/modify application-specific (jira/crucible/confluence) groups within crowd which will be the SSo for all the apps.)

meena radhakris · Accepted Answer

what I found so far.....

>>(i) Does adding a new group on this directory within Crowd create a local group in Crowd?

Yes, any groups created in Delegated directory are local to Crowd.

>>(ii) does Crowd get a read-only access to LDAP server?

Yes

>>>(iii) Since I am not able to search and view the users or groups in LDAP, how can I create groups within Crowd and add users to it?

The only way I see it is to set to Import LDAP groups when the user first logs in and then go into Crowd and add the user or the user's LDAP group to Crowd's local group.