When using LDAP authentication it is possible to have a duplicate group. For example, in my mapping, I am using the groupOfNames ObjectClass to select groups and the cn attribute to get the group name. You might have 2 groups with the same value for the cn attribute in the LDAP tree. So, what happens in this case? Do you get one or the other randomly? Non-randomly? Or does Wildfire do what I wish it would, assume that the group is composed of the members of all of the groups that have that name?