Unknown internal error doing a GET to /api/sm/services/active-directory

Not close to a computer right now, @flox might have a better idea what else to ask for. In any case, take a look at this topic, which had one of the AD issues fixed as part of the 5.0.9-0 testing release:

I am surprised that if the domain user/groups are propagating into Rockstor (i.e. you can pick them as owners, that it still doesn’t give you access).