We had encountered the following error screen on OBI.
Solution:

|
Property Name
|
Value
|
|
virtualize
|
false
|
|
user.login.attr
|
samaccountname
|
|
username.attr
|
samaccountname
|
|
Role Name
|
Members
|
|
BISystem
|
OBIA_BISystemUser (User)
|
|
BIAdministrator
|
OBIA_Administrators (Group)
|
|
BIAuthor
|
OBIA_Administrators (Group)
|
|
BIConsumer
|
OBIA_Administrators (Group)
|
|
Global Roles :
|
Assignment :
|
|
Admin
|
Group : OBIA_Administrators
User : OBIA_BISystemUser
|
|
AdminChannelUsers
|
Group : OBIA_Administrators
|
|
AppTester
|
Group : OBIA_Administrators
|
|
CrossDomainConnector
|
Group : OBIA_Administrators
|
|
Deployer
|
Group : OBIA_Administrators
|
|
Monitor
|
Group : OBIA_Administrators
|
|
Operator
|
Group : OBIA_Administrators
|
|
Connection
/ Host
|
Active Directory IP
|
|
Connection
/ Port
|
389
|
|
Connection
/ Principal
|
cn=obia_weblogic,cn=users,dc=gm,dc=
|
|
Connection
/ Credential
|
Passw0rd
|
|
Connection
/ SSLEnabled
|
NOT
SELECTED
|
|
Users
/ User Base DN
|
dc=gm,dc=
|
|
Users
/ All Users Filter
|
|
|
Users
/ User From Name Filter
|
(&(samaccountname=%u)(objectclass=user))
|
|
Users
/ User Search Scope
|
subtree
|
|
Users
/ User Name Attribute
|
samaccountname
|
|
Users
/ User Object Class
|
user
|
|
Users
/ Use Retrieved User Name as Principal
|
SELECTED
|
|
Groups
/ Group Base DN
|
cn=users,dc=gm,dc=
|
|
Groups
/ All Groups Filter
|
|
|
Groups
/ Group From Name Filter
|
(&(cn=%g)(objectclass=group))
|
|
Groups
/ Group Search Scope
|
subtree
|
|
Groups
/ Group Membership Searching
|
limited
|
|
Groups
/ Max Group Membership Search Level
|
1
|
|
Groups
/ Ignore Duplicate Membership
|
NOT
SELECTED
|
|
Groups
/ Use Token Groups For Group Membership Lookup
|
NOT
SELECTED
|
|
Static
Groups / Static Group Name Attribute
|
cn
|
|
Static
Groups / Static Group Object Class
|
group
|
|
Static
Groups / Static Member DN Attribute
|
member
|
|
Static
Groups / Static Group DNs from Member DN Filter
|
(&(member=%M)(objectclass=group))
|
|
Dynamic
Groups / Dynamic Group Name Attribute
|
|
|
Dynamic
Groups / Dynamic Group Object Class:
|
|
|
Dynamic
Groups / Dynamic Member URL Attribute
|
|
|
Dynamic
Groups / User Dynamic Group DN Attribute
|
|
|
General
/ Connection Pool Size
|
0
|
|
General
/ Connect Timeout
|
20
|
|
General
/ Connection Retry Limit
|
3
|
|
General
/ Parallel Connect Delay
|
0
|
|
General
/ Results Time Limit
|
0
|
|
General
/ Keep Alive Enabled
|
NOT
SELECTED
|
|
General
/ Follow Referrals
|
SELECTED
|
|
General
/ Bind Anonymously On Referrals
|
NOT
SELECTED
|
|
General
/ Propagate Cause For Login Exception
|
NOT
SELECTED
|
|
General
/ Cache Enabled
|
SELECTED
|
|
General
/ Cache Size
|
32
|
|
General
/ Cache TTL
|
60
|
|
General
/ GUID Attribute
|
samaccountname
|
|
Property Name
|
Value
|
|
virtualize
|
true
|