LDAP Authenticator (XWikiLDAPUtils) does not synchronize, uses cache only

...
DEBUG o.x.c.l.XWikiLDAPUtils         - Found cache entry for group [ou=Xwiki,ou=nwa,ou=groups,dc=acme,dc=net] ,
DEBUG o.x.c.l.XWikiLDAPUtils         - Found group [ou=Xwiki,ou=nwa,ou=groups,dc=acme,dc=net] members [{..., cn=zzz test user,ou=rds,ou=nl,ou=btn,ou=ndcs,dc=acme,dc=net=zzz123, ...}] ,
DEBUG o.x.c.l.XWikiLDAPUtils         - Found user dn in user group [cn=zzz test user,ou=rds,ou=nl,ou=btn,ou=ndcs,dc=acme,dc=net] ,
DEBUG o.x.c.l.XWikiLDAPUtils         - Found user dn in user group [cn=zzz test user,ou=rds,ou=nl,ou=btn,ou=ndcs,dc=acme,dc=net] ,
DEBUG o.x.c.l.XWikiLDAPConnection    - Binding to LDAP server with credentials login=[cn=zzz test user,ou=rds,ou=nl,ou=btn,ou=ndcs,dc=acme,dc=net] ,
DEBUG o.x.c.l.XWikiLDAPConnection    - Binding to LDAP server with credentials login=[cn=readonly,dc=acme,dc=net] ,
DEBUG o.x.c.l.XWikiLDAPUtils         - LDAP attributes will be used to update XWiki attributes. ,
DEBUG o.x.c.l.XWikiLDAPUtils         - Getting the list of user fields to synchronize ,
DEBUG o.x.c.l.XWikiLDAPUtils         - LDAP avatar photo synchronisation is enabled ,
DEBUG o.x.c.l.XWikiLDAPUtils         - LDAP avatar photo field name: jpegPhoto ,
DEBUG o.x.c.l.XWikiLDAPUtils         - LDAP user fields to synchronize: [sn, givenName, mail, displayName, jpegPhoto] ,
DEBUG o.x.c.l.PagedLDAPSearchResults - LDAP pagined search: base=[cn=zzz test user,ou=rds,ou=nl,ou=btn,ou=ndcs,dc=acme,dc=net] query=[null] attrs=[[sn, givenName, mail, displayName, jpegPhoto]] scope=[0] typesOnly=[false] pageSize=[500], cookie=[null] ,
DEBUG o.x.c.l.XWikiLDAPConnection    -   - values for attribute [displayName] ,
DEBUG o.x.c.l.XWikiLDAPConnection    -     |- [Test User] ,
DEBUG o.x.c.l.XWikiLDAPConnection    -   - values for attribute [sn] ,
DEBUG o.x.c.l.XWikiLDAPConnection    -     |- [User1] ,
DEBUG o.x.c.l.XWikiLDAPConnection    -   - values for attribute [givenName] ,
DEBUG o.x.c.l.XWikiLDAPConnection    -     |- [Test1] ,
DEBUG o.x.c.l.XWikiLDAPConnection    - LDAP search found attributes [[{name=dn value=cn=zzz test user,ou=rds,ou=nl,ou=btn,ou=ndcs,dc=acme,dc=net}, {name=displayName value=Test User}, {name=sn value=User1}, {name=givenName value=Test1}]] ,
DEBUG o.x.c.l.XWikiLDAPUtils         - UserPageName: zzz123 ,
DEBUG o.x.c.l.XWikiLDAPUtils         - Creating new XWiki user based on LDAP attribues located at [cn=zzz test user,ou=rds,ou=nl,ou=btn,ou=ndcs,dc=acme,dc=net] ,
DEBUG o.x.c.l.XWikiLDAPUtils         - Start first synchronization of LDAP profile [[{name=dn value=cn=zzz test user,ou=rds,ou=nl,ou=btn,ou=ndcs,dc=acme,dc=net}, {name=displayName value=Test User}, {name=sn value=User1}, {name=givenName value=Test1}]] with new user profile based on mapping [{mail=email, givenname=first_name, displayname=fullname, sn=last_name}] ,
DEBUG o.x.c.l.XWikiLDAPUtils         - New XWiki user created: [xwiki:XWiki.zzz123] ,
DEBUG o.x.c.l.XWikiLDAPConfig        - Groupmapping found [XWikiAllGroup] [[cn=xwiki-users,ou=Xwiki,ou=nwa,ou=groups,dc=acme,dc=net]] ,
DEBUG o.x.c.l.XWikiLDAPConfig        - Groupmapping found [XWikiAdminGroup] [[cn=xwiki-admin,ou=Xwiki,ou=nwa,ou=groups,dc=acme,dc=net]] ,
DEBUG o.x.c.l.XWikiLDAPUtils         - Updating group membership for the user [XWiki.zzz123] ,
DEBUG o.x.c.l.XWikiLDAPUtils         - The user belongs to following XWiki groups:  ,
DEBUG o.x.c.l.XWikiLDAPUtils         - XWiki.XWikiAllGroup ,

...