Ambiguous documentation for nested AD groups
Summary
Ambiguity in the documentation around support for nested Active Directory groups. Are nested AD groups supported in CE or not?
Steps to reproduce
In the CE documentation it states:
Tip: If you want to limit access to the nested members of an Active Directory group you can use the following syntax:
(memberOf=CN=My Group,DC=Example,DC=com)
And then in the LDAP Additions in GitLab EE documentation it says:
Active Directory also supports nested groups. Group sync will recursively resolve membership if
active_directory: true
is set in the configuration file.
What is the current bug behavior?
Administrators gets confused when configuring Gitlab. Is nested groups supported in Gitlab CE or only in EE?
What is the expected correct behavior?
Less confusion for administrators.
Results of GitLab environment info
Exists in current (Gitlab 9.3.x) versions.
Possible fixes
The section that's confusing is https://gitlab.com/gitlab-org/gitlab-ce/blob/master/doc/administration/auth/ldap.md#L227