This version corrected a lots issues. Thanks a lot first.
Unfortunately, we shortly found a new bug while creating a new user:
Can't browser AD account. It always show "VALIDATION_INVALID_URL_LDAP"
Fortunately, we still can create a local user then switch the authentication to AD
to be authenticated.