I have a customer who wants to use AD groups for vCloud Director authentication, as in their private cloud they have specific OUs for Organisational LDAP lookups.
Obviously, users cannot be members of several OUs within the 2008 AD, so they are using global security groups instead of individual users in these OUs, then importing these groups via the LDAP sync into vCloud organisations.
Only problem is that when assigned a role by the Org Admin (i.e. vAPP User), they cannot login to their organisation using AD credentials.
I found this KB article which I assume is the issue, but it's not clear on the steps and implications of using it's workaround for getting group authentication to work. Any thoughts / suggestions?
Cheers.
Jeremy.