Comment 11 for bug 746981

That's an unrelated issue. You wouldn't see this with 'enumerate = false', for one thing.

What it's telling you is that 300s isn't long enough to fully process all users, groups and group memberships. Chances are that you have a very large or complicated group setup.

Try setting 'ldap_enumeration_refresh = 600'.