commented out bare setting in AD for username allowing a user@domain.com to import ldap groups properly.