Import ldap nested groups to proxmox

Question

I want to import 2 groups to Proxmox but they have other groups in them and i want the members to still be in that group after importing them.

group 1: user1,user2,group3

group 2: group4

group 3: user3 user4

group 4: user5-user754

Right now I'm importing the groups to Proxmox with ldap group filter:

(|(CN=group1)(CN=group2))

But in Proxmox the groups are imported as:

group 1: user1,user2
group 2: (empty)

What i want:

group 1: user1,user2,user3,user4
group 2: user5-user754

I am very new to ldap and filters. This would help a lot, thank you

If your LDAP server supports it you might be able to leverage LDAP_MATCHING_RULE_IN_CHAIN: ldapwiki.com/wiki/Wiki.jsp?page=LDAP_MATCHING_RULE_IN_CHAIN — Tom
– Tom, Commented May 8 at 15:43

Tolqiu · Accepted Answer · 2025-05-10 22:27:38Z

0

Most LDAP clients (including Proxmox) do not resolve nested groups by default — they only include direct members listed in the member attribute. So unless Proxmox explicitly supports and declare it in config as enable nested groups or recursive group membership resolution, nested groups won’t be resolved.
If you are using Active Directory, you can use this filter to get nested groups and users:
(|(memberOf:1.2.840.113556.1.4.1941:=CN=group1,OU=Groups,DC=yourdomain,DC=com)(memberOf:1.2.840.113556.1.4.1941:=CN=group2,OU=Groups,DC=yourdomain,DC=com))

answered May 10 at 22:27

Tolqiu

615 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Import ldap nested groups to proxmox

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related