Q: how can I do an LDAP re-sync of my userlist?
A: On the Domain Settings page under "Advanced Configuration" is an option to RESET the "Highest Seen Serial"
Each user in the LDAP Database has a unique serial number that is incremented whenever a change is made to their LDAP configuration.
BESS uses this to determine which users to pull from the database.
It keeps a record of the highest serial number pulled and will not update or pull any user with a lower serial.
If you want to re-sync ALL the users in your userlist you can click on the RESET button which will set the "Highest Serial Seen" to ZZERO (0)
The next time BESS syncs to the database it will pull any user that matches the filters with a serial number higher than ZERO (0)