The code here seems specific to LDAP, but the refresh button and the rake task will run on all external user groups, when it wouldn't be applicable for the Apache based groups.  I'd have thought the model method should be generic, not LDAP-specific, but a no-op on non-LDAP groups or something.