hi,

we have a working one way trust between an AD forest and a RHEL 7 forest.

In order to use AD nested groups, do we need to add an external IDM group for every nested group?