we are trying to use foreign security principals that are members another domain in the same forest. we have our groups setup as domain local groups so that we can add FSP to them. but we can not get the ldap query to pull them in. what is the ldap query we would need to pull these users in? for example user 999999 is a FSP and a member of our local AD group , cn=group95,dn=home, dn=com.
Have you tried connecting to the global catalog of your domain to see if that would resolve the issue?
A stack trace would be helpful as well.