title: Ansible AWX LDAP user search issue when users are members of a group
body: <p>My ansible AWX exists in a domain.dev domain. I am trying to configure ldap access from ansible awx (tower). The following default &quot;ldap user search&quot; works.</p>
  <pre><code>[
   &quot;OU=Admins,OU=Dev,DC=domain,DC=dev&quot;,
   &quot;SCOPE_SUBTREE&quot;,
   &quot;(sAMAccountName=%(user)s)&quot;
  ]
  </code></pre>
  <p>However, we have security groups which contain users from another trusted domain. Those users must be able to login so &quot;ldap user search&quot; should search for users in all groups in an OU or specific groups depending on what is possible.</p>
  <pre><code>[ 
    &quot;MemberOf=CN=DEVOPS,OU=Groups,OU=Dev,DC=domain,DC=dev&quot;, 
    &quot;SCOPE_SUBTREE&quot;, 
    &quot;(sAMAccountName=%(user)s)&quot; 
  ]
  </code></pre>
  <p>awx_web log returns:</p>
  <pre><code>INVALID_CREDENTIALS({'msgtype': 97, 'msgid': 1, 'result': 49, 'desc': 'Invalid credentials', 'ctrls': [], 'info': '80090308: LdapErr: DSID-0C090439, comment: AcceptSecurityContext error, data 52e, v4563'}
  </code></pre>
  <p>&quot;LDAP group type&quot; is set to &quot;NestedMemberDNGroupType&quot;.</p>
  <p>The ldap host is a global catalog and I'm using port 3268.</p>
  <p>Unfortunately I don't know any ldap experts, so any tips or help would be greatly appreciated. Thanks.</p>