fix ldap user group sync