This technote states that nested LDAP groups are not supported in IBM Rational Team Concert version 1.0.x.
Nested LDAP sub-group members are not given proper access to Jazz Team server.
- You define a LDAP group named: MyJazzAdminUsers, added user1 and 2 into the group.
- You map MyJazzAdminUsers to JazzAdmins group in your Jazz team server. User1 and 2 are given admin access by being placed in MyJazzAdminUsers group.
- You created another LDAP user group: group1, added user3 and 4 to it.
- You added group1 as a sub-group of MyJazzAdminUsers. User3 and 4 are not getting admin access to your Jazz team server.
Rational Team Concert 1.0.x does not supported LDAP nested groups. This feature is planned to be implemented in Rational Team Concert 2.0.
Refer to Jazz.net Work item 59463 for detail of this enhancement request.
Resolving the problem
In order to provide LDAP group the proper access to your Jazz team server, try include all nested group members to its parent group, until Rational Team Concert supports nested LDAP groups.
Jazz and Rational Team Concert have an active community that can provide you with additional resources. Browse and contribute to the User forums, contribute to the Team Blog and review the Team wiki.