# LDAP (via BindDN) - mapping LDAP groups to teams with nested Active Directory groups

**URL:** <https://forum.gitea.com/t/ldap-via-binddn-mapping-ldap-groups-to-teams-with-nested-active-directory-groups/8430>\
**Category:** Install/Maintain/Configure\
**Created:** [January 11, 2024, 1:52pm UTC](https://forum.gitea.com/t/ldap-via-binddn-mapping-ldap-groups-to-teams-with-nested-active-directory-groups/8430 "2024-01-11T13:52:55Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![halbsodoppelt](https://avatars.discourse-cdn.com/v4/letter/h/a587f6/32.png) [@halbsodoppelt](https://forum.gitea.com/u/halbsodoppelt)\
**Post date:** [January 11, 2024, 1:52pm UTC](https://forum.gitea.com/t/ldap-via-binddn-mapping-ldap-groups-to-teams-with-nested-active-directory-groups/8430/1 "2024-01-11T13:52:55Z")

</div>

Hello everyone!

I sucessfully configured LDAP via BindDN with our Active Directory, users get synchronized.  
The Admin Filter is filtering for users in a nested Group, it looks like this:  
`(&(objectClass=user)(memberOf:1.2.840.113556.1.4.1941:=CN=Gitea-Admins,OU=Gitea-Groups,OU=IT,DC=example,DC=com))`

Now i am trying to map LDAP Groups to Organization teams.  
The Problem is that i also need to use nested groups.

I am trying something like this:

```auto
{
  "CN=Gitea-Team1,OU=Gitea-Groups,OU=IT,DC=example,DC=com": {
    "Team1": [
      "Team1"
    ],
	"Team2": [
      "Team1"
    ],
	"Team3": [
      "Team1"
    ]
  }
}

```

The LDAP Object `CN=Gitea-Team1` contains “Team1A”, “Team1B”, “Team1C”.

I also tried to do the same i did with the Admin Filter and edited the LDAP Group reference in the json string to  
`(&(objectClass=group)(memberOf:1.2.840.113556.1.4.1941:=CN=Gitea-Team1,OU=Gitea-Groups,OU=IT,DC=example,DC=com`  
but i guess that cant be processed in json?

Is there any way to solve this?  
Do i need to change the “User Attribute Listed in Group” or “Group Attribute Containing List of Users”?

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![Gitty](https://avatars.discourse-cdn.com/v4/letter/g/db5fbb/32.png) [@Gitty](https://forum.gitea.com/u/Gitty)\
**Post date:** [February 5, 2026, 11:06am UTC](https://forum.gitea.com/t/ldap-via-binddn-mapping-ldap-groups-to-teams-with-nested-active-directory-groups/8430/2 "2026-02-05T11:06:28Z")

</div>

Any updates on this @halbsodoppelt?  
Did you get it working?