Base DN - there is note : For subdomain.domain.suffix, use DC=subdomain,DC=domain,DC=suffix. Do not specify an OU here.
Thats incorrect, OU could be specified here, if your LDAP uses it... Without it my configuration didn't work.
LDAP Login Attribute - note: In case your installation uses something other than uid;
Again incorrect, even with default uid this field must be filled and set to uid....