The suggested solution of using libnss-ldap/libpam-ldapd is not a solution for this problem, since libnss-ldap/libpam-ldapd does not provide nested groups. Regards, Martijn van Brummelen