I'm playing a bit with it currently..
new AD-Default-Fields in /etc/gromox/ldap_adaptor.cfg
ldap_group_addr=mail
ldap_group_filter=(objectclass=group)
ldap_group_name=cn
ldap_group_memberof=memberOf
The cli still has some problems as it seems but you can just select no-template in the web-admin and reapply your ldap-profile. Your special configuration might get lost in the process tho!!! 😛
Now after adding an email address to an group i could downsync it succesfully
grommunio-admin ldap downsync --full
....
Synchronizing members of group ldap_group@domain.tld...11 added, 0 removed
...
exmdb-permissions example
grommunio-admin exmdb info@domain.tld folder grant -r 0x9 ldap_group@domain.tld readany
I couldn't find the group in the Address book for now (Webmail)
Maybe that was the cache...
It worked and i could just manually add the entire Mailbox to my User.