IBM WAS LDAP不能读取组成员信息

Question:

WAS 使用MS AD域用户登录时，Applications映射了Security role to user/group mapping功能映射组但是组中用户不能正常使用.

Answer:

Security->Global security->Standalone LDAP regitry(Configue)，进入编辑界面。
选择Advanced Lightweight Directory Access Protocol (LDAP) user registry settings选项。修改配置如图：
![image](https://yqfile.alicdn.com/c92ae952a82cf177adb81fc1967e25d613d1b329.png)

官方链接地址为[https://www.ibm.com/support/knowledgecenter/zh/SSAW57_9.0.0/com.ibm.websphere.nd.multiplatform.doc/ae/tsec_tmsad.html]