I know this thread is many years on, but hopefully this info will save
someone some headache:We had the same issue, and for us it was a matter
of getting the group membership information pulling from the right place
and ensuring that our LDAP search ...