Cannot use LDAP user to login to Cloudera Manager

[#1]

I configured a remote ldap server, and add some entries into it.

The base DN: dc=sample,dc=com

The organization unit DN: ou=People,dc=sample,dc=com

The inteOrgPerson DN: uid=usera,ou=People,dc=sample,dc=com

Then I followd the instruction from this link since I am using the lastest CM: https://www.cloudera.com/documentation/enterprise/latest/topics/cm_sg_external_auth.html

And I tried this config below based on the description from the link above

After restarted the CM server, I could not use 'usera' to login. 

Actually I have many groups (organization unit) in the LDAP server, so I really need to use one of the users from these groups to login to Cloudera Manager.

Is there anyone who could tell me what I was doing wrong? Many thanks

[#2]

When I use 'uid={0},ou=People' in LDAP Distinguished Name Pattern, I can login with the users under 'People'. But I want to be able to login to Cm with the users from different groups. Wo how to do it? The document does not help at all. Is this a bug?

[#3]

What exactly is the meaning of a LDAP user group in Cloudera Manager?

Is it a organization unit? or a posixGroup? or a groupOfNames?

[#4 · Accepted solution]

After several tries, I found out groupOfNames should be the group in Cloudera Managers and it works for me. Now I can login with LDAP users and can filter users based on groups