Nested groups in Crowd (Active Directory DB) don't work

Connecting Crucible to our Crowd server (using an Active Directory backend), and restricting access by group, works. Unfortunately, restricting access by nested groups doesn't seem to work (users can log in, but cannot view any repositories), and our user organization scheme makes it pretty difficult to organize users into flat groups.

Cheers. Let me know if any more information is required.