Red Hat DIRECTORY SERVER 8.1 - DEPLOYMENT Deployment Manual page 119

Group Schema Differences between Red Hat Directory Server and Active Directory
7.3.4. Group Schema Differences between Red Hat Directory Server
and Active Directory
Although Active Directory supports the same basic X.500 object classes as Directory Server, there are
a few incompatibilities of which administrators should be aware.
Nested groups (where a group contains another group as a member) are supported and for WinSync
are synchronized. However, Active Directory imposes certain constraints as to the composition of
nested groups. For example, a global group contain a domain local group as a member. Directory
Server has no concept of local and global groups, and, therefore, it is possible to create entries on the
Directory Server side that violate Active Directory's constraints when synchronized.
109