Can't get user's OU using LDAP authentication in Bigbluebutton?

Question

Active Directory

When authorizing an AD user in Bigbluebutton, it is not possible to automatically assign the user role...
OU=Teachers. Users are scattered across folders in the active directory. OU=Teachers is the middle level in the tree
Role in the BBB = Teachers
My suspicion is that the kerio-control user does not have read permissions .... how to find out and how to fix I did not find it, I searched for a long time, but badly ...

Connection parameters (connection works)
LDAP_SERVER=dc.local
LDAP_PORT=389
LDAP_METHOD=plain
LDAP_UID=sAMAccountName
LDAP_BASE=DC=dc,DC=local
LDAP_AUTH=simple
LDAP_BIND_DN=CN=kerio-control,CN=Users,DC=dc,dc=local
LDAP_PASSWORD=qsczse

LDAP_ROLE_FIELD=OU

#LDAP_FILTER=
#LDAP_ATTRIBUTE_MAPPING=

Answer 1

Perhaps it does not know how to read from the root, explicitly specify a specific OU in LDAP_BASE.