Configuring Active Directory Authentication for BIG-IP Configuration Utility

Above where you have "Scope: Base" this was giving me problems, I had specified the OU where the users are listed, but it did not work until I changed it to "sub".

Some troubleshooting tips I ran across while setting this up -- if you capture the LDAP traffic with TCPDUMP, read the cap with Wireshark and it will show you the LDAP conversation and you can see the errors - so helpful.

Another tool is LDP.EXE which I found was already on my domain controller. With this tool, you can perform the simple bind, to validate your bind DN and password, and also you can run the search - to validate that part of your configuration. You'll enter the same DN for your search base, and pick the same Base/Sub selection, then configure the search filter as (samaccountname=testuser). You'll be able to see the results immediately.