We are running OCUM 6.4 on a Windows VM and can have individual users authenticate, but access via AD groups does not work.
Authentication testing returns the following:
User Name: **redacted**
Full Name: **redacted, but this information is correct for any given user**
Groups:  <-- here appears to be the problem
Groups for every tested user returns this character and nothing else.
It makes no difference under "other" if I set
no difference if toggling "Disable nested groups" either
removing DCs and setting them one by one as the only authentication server returns the same issue.
domain level is 2008, we are using SSL over port 636