I know is probably too late for this response, but the problem is that nested groups processing in the enrolment plugin is only supported for MS Active Directory LDAP servers.
If you are actually using MS Active Directory and want to enable the nested groups feature, you have to configure the LDAP *enrolment* user type as "MS ActiveDirectory".
Saludos.
Iñaki.
Enrolment
LDAP enrollment triggers only upon user login?
This discussion has been locked so you can no longer reply to it.