Domain groups not showing up in Openfire. Any ideas?

Question

LDAP

Good day to all. I installed Openfire on CentOS 7, CentOS itself is entered into the domain, Openfire is configured via LDAP. I pulled up users and groups, but users were pulled up in the "domain users" group, although other groups are set by the main groups, depending on the company's division. Well, in editing groups inside the muzzle of openfire, it displays the inscription "Not allowed: the group account system is read-only.". If anyone has come across, maybe someone can help. This is the first time I've encountered something like this, but I haven't been able to find any information on the net for almost a week now.

Answer 1

Issue resolved. The domain used global department groups as primary groups. The solution to the problem is as follows, I created local security groups in the domain, added users, then in the openfire itself "Users / groups - groups", by clicking on the name of the group, went into editing it, where in the "General list" block I set the value "Enable sharing to the group's contact lists", enter the value of the group that we want to see in the messenger's contact list with the "All users" flag set. Well, actually apply the settings. These actions are done for each of the problem groups.