When I setup authentication I used an ID that doesn't have any special AD permissions, just a regular user.  Does the user have to have any special permissions in order to get the group roles to synch?

Thanks,
Randy

Roberta,

Heh, that's probably my issue.  I don't have any one word roles!  "US Arkansas" type of roles.  That at least clues me in.  I liked that one post of a possible hack of changing the password everytime someone logs in though.  But that only solves the synching of roles each time they login.

Oh well, I guess I'll have to hope that Tam can fix it.  Fortunately it's not too big of an issue right now, but it could be huge if my deployment goes out company wide!

Randy

I searched and couldn't find the original post.  Essentially though, if the password changes the module will go in and add any new roles the user belongs too.  So if we have the module think the password has changed everytime the user authenticates, it should add the new roles. 

Note that even though it doesn't remove any roles they no longer belong too, it would at least be a step in the right direction.

I went in and added a bunch of bugs into Gemini.  Maybee someone will review it and put it in the authentication section.