Moodle 2.1 LDAP enrolment error

[climo]

Please save me from tearing my hair out!

We have a Moodle set up, which was running version 2.0.3 on Win2008r2SP1 with IIS and SQL.

We have been using LDAP authentication and enrollment fine (using samaccountname as the userID).

Part of the summer work was to upgrade to version 2.1.1 and implement HTTPS, which both went fine.

 

Now it seems that LDAP Enrolment has been broken.

Authentication still works, and enrolment works if I run the CLI PHP sync script.

But it does not run on log in!

Or perhaps rather it does run, but incorrectly, as I have it set to unenrol users from a course if they are removed from the AD groups. What happens in that case is that when a user logs in they are unenrolled from all their courses if they were enrolled in them via LDAP. (perhaps it sees the groups but believes they are not in it?)

 

I've rolled back the version of Moodle and undone all the changes made, but its still broken, nothing has changed with AD etc and I've triple checked all the settings in Moodle.

Thoughts or ideas would be appreciated!

[NetworkSeb]

Hey climo,

 

Did you ever fix this issue?

 

Having exactly the same issue on 2.5 (latest from git)