Active Directory groups...show up, but can''t authenticate

I have a interesting situation. Here’'s my AD structure:

Domain

—OU 1


UserA


UserB

—OU 2


UserC


UserD


Group1


UserC


UserA


UserB


Group2


UserD

I need UserA and UserB to be able to log in with the baseDN in my xml file pointing to OU 2. I need to lock it down so only users under OU 2 can get in so that’‘s why I’'m pointing the baseDN to that specific OU. Wildfire sees the group okay (Group1 and Group2) and the group members, but it lists UserA and UserB with a username being the full distinguished name. User C shows a username of only its username (testuser).

Is this possible what I’'m trying to do? Thanks

I solved it…custom LDAP query.