Hey Tom,
Can you log into an AD setup you have with /debug/ and tell me what this says?
LDAP[UserID][XXXXX]
In our environment I had to patch ldap.inc.php to get the UID to map properly (and thus apply groups). Before that the UserID would always be -1.
I'm trying to figure out if I had some bad config.php settings, or if it's actually broken and I can send you guys the patch I wrote.
Thanks!
Arbor Networks
+1.734.794.5033 (d) | +1.734.846.2053 (m)