After upgrade to 422 our LDAP sync process occasionally removes the mapping between roles and ldap groups. This is quite a serious issue but we cannot find errors in the logs.
We are currently processing some similar tickets. I suggest to file a ticket at support.mendix.com nonetheless, to make sure the things you need are processed and to make sure you are kept up to date. You can refer to this forumthread in the ticket.