More Security-Groups issues

[MLE]

Hello All,

I have an issue with ASGRD 2015 patch 8 with Security Groups.
We are running in database mode with user-permissions activated.

I have an AD user which is assigned to two different ASG Security-Groups.
For some strange reason it will only show the first Security-Group when selecting menu item "Assigned Security Groups".

I assume that in my case both Security-Groups should show up?

PS1: I alreay tried creating new Security-Groups with this user attached, but it keeps on showing only the first Security-Group.

Any idea why only the first Security-Group is shown?

---

Extra info after extensive testing:

I try to find any logic behind this behaviour.
I found out that the F5 (refresh) button is not the same as closing and reopening ASG regarding "reading" of the security-group settings.

1) When I have two Security-Groups, where the second one has only the user in it all seems to work as expected.
After changing to these security-group settings, I HAVE to close and reopen ASG in order for the changes to take effect for this AD user.

2) When I have two Security-Groups, where the second one has a global AD group with the user inside it will never show up.
Even when closing and reopening the ASG application.

Note that for both scenario, it doesn't matter whether the first Security group has a global AD group assigned to it, or the AD user directly.

---

Even more info after even more testing:

When using local AD groups (as compared to global AD groups) ASG security-groups doesn't seem to work at all.
Does this mean that local AD groups are not supported by ASGRD?

And (not related to this post): what about nested global AD groups. Is this supported by ASGRD?

[MLE]

So, after a good night sleep some more news:

It now seems that all works fine with local AD groups. Everything works as expected. All Security-groups showed up for my test user.
But it only started working after one day. No changes where made, yesterday it did not work, today it did.

It looks to me that there is some kind of local cache involved on the client site which get's only updated after a few hours. Even closing and re-opening the app does not work.
Can anyone tell me if this is the case?
Has any one else had similar issues?

PS: I am 100% sure it is not an issue on our AD itself. All AD's involved are in sync and OK. Tests with other tools proved this...

[DevOma]

Huge post :-) So I try to answer step by step...

First - Security assignments are only loaded during Startup of the application. Refresh (F5) will not change the security assignments.

I tried also to assign a AD-user to different Security Groups in ASG-RD - and all are shown (comma separated). Even if I assign some AD-groups also...

Local AD Groups - you mean groups from local PC? That won't work and I don't think that it makes sense...

Nested Groups - I'm not sure if this is working - I know that we have that for an other product but have to ask if there is some extra implementation for it...