Hey All, If I want sssd to lookup if I belong in any groups or nested groups based on a string ( wildcard) in a group, what be my best options? I would like to keep the ad_access_filter to a minimum and grant access if a user is part of a subgroup. If user is in B and B is in A, allow access as long as A appears on the filter list for example. Cheers, Tom Sent from my iPhone