RE: Tricky problem with ldap and primary groups in AD