Mapping roles doesn't work

[AW-HTK]

Hello,
im using SF 3.4 with ldaptools-bundle.
all woks fin except the role mapping and this' my config:
`
ldap_tools:

domains:
    ad.home.fr:
        domain_name: ad.home.fr
        base_dn: 'dc=ad,dc=home,dc=fr'
        username: 'cn=admin,dc=ad,dc=home,dc=fr'
        password: "mypass"
        servers: [ad.home.fr]
        bind_format: 'uid=%%username%%,ou=Users,dc=ad,dc=home,dc=fr'
        ldap_type: openldap
security:
    roles:
        # Using the common group name
        SUPER_ADMIN: [ 'Domain Admins' ]
        # Using the distinguished name of the group
        ROLE_USER: 'cn=Clients,ou=Groups,dc=ad,dc=home,dc=fr'
        ROLE_ADMIN: 'cn=Tech,ou=Groups,dc=ad,dc=home,dc=fr'

`
and security

`

security:

hide_user_not_found: false

encoders:

    LdapTools\Bundle\LdapToolsBundle\Security\User\LdapUser: plaintext

providers:

    ldap:
        id: ldap_tools.security.user.ldap_user_provider

firewalls:
    # disables authentication for assets and the profiler, adapt it according to your needs
    dev:
        pattern: ^/(_(profiler|wdt)|css|images|js)/
        security: false

    main:
        anonymous: ~
        provider: ldap
        pattern: ^/
        logout: ~
        guard:

            authenticators:
                - ldap_tools.security.ldap_guard_authenticator

    login:
        pattern: ^/login$
        anonymous: ~

access_control:
    - { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/, roles: ROLE_USER }

`

in my openldap i have:

2 Groups: ou=Groups,dc=ad,dc=home,dc=fr

• cn=Tech,ou=Groups,dc=ad,dc=home,dc=fr ==> gidnumber : 1001
• cn=Clients,ou=Groups,dc=ad,dc=home,dc=fr ==> gidnumber : 1002

2 Users: ou=Users,dc=ad,dc=home,dc=fr

• uid=user1,ou=Users,dc=ad,dc=home,dc=fr
• uid=user2,ou=Users,dc=ad,dc=home,dc=fr
  each user have a gidNumber
• user1 => gidNumber: 1001
• user2 => gidNumber: 1002

Can someone help me please?
Thanks.

[baptisterajaut]

Bump.
Wanting to map a role with a gobal role and it doesnt work.
ROLE_SAUVEGARDE_LECTURE: ['ID_GUISMO_ROLE_SAUVEGARDE_RX']'
this role is never given. Account is member of 'Domain Users' , which is a member of ID_GUISMO_ROLE_SAUVEGARDE_RX .
Setting Domain Users doesnt work.
Howver, when an account is member of a role non including domain users, it works flawlessly.