Active Directory Backend nested groups not working

Hi all,

im wondering, if it is really not possible to use nested AD groups in SSL Client VPN or ReverseProxy Authentication?! We are facing, that it is not possible to allow users, that are part of nested groups.

So for example in the reverse authentication, we configured an AD group grp1. In this group we have other groups. For example grp2. In this group grp2, user xy is member, and should be allowed to login with his credentials. But it doesn´t work.

is there any plan to implement nested group membership login? I heard, that it is only possible in the webproxy with AD SSO, because it uses kerberos.

Best Regards

Sebastian