集成SpagoBI和LDAP时无法设置用户角色

在与LDAP和SpagoBI 4.1.0集成时，我面临角色设置问题，我可以登录，但无法通过LDAP设置用户角色

我的LDAP xml设置如下

<?xml version="1.0" encoding="ISO-8859-1"?>

<!--  SERVER -->
<HOST>********</HOST>
<PORT>389</PORT>    
<ADMIN_USER>********</ADMIN_USER>
<ADMIN_PSW>******</ADMIN_PSW> <!-- password in clear text -->
<BASE_DN>DC=***,DC=com</BASE_DN> <!-- base domain, if any -->

<!-- USERS -->
<USER_SEARCH_PATH>ou=People</USER_SEARCH_PATH> <!-- SpagoBI will look for users under this node -->
<USER_OBJECT_CLASS>applUser</USER_OBJECT_CLASS> <!-- class for users' objects -->
<USER_ID_ATTRIBUTE_NAME>uid</USER_ID_ATTRIBUTE_NAME> <!-- name of the attribute containing the user identifier -->
 <!-- name of the attribute(*) containing the user name -->
<USER_NAME_ATTRIBUTE_NAME>cn</USER_NAME_ATTRIBUTE_NAME>
<!-- (*) SPAGOBI attribute, not LDAP attribute!!! It must match the "name" attribute of one USER_ATTRIBUTE tag below -->
<USER_MEMBEROF_ATTRIBUTE_NAME>memberOf</USER_MEMBEROF_ATTRIBUTE_NAME> <!-- this attribute has to contain the list of groups the user belongs to -->

<!-- list of the users' attributes to be loaded when querying the LDAP -->
<USER_ATTRIBUTE name="uid">uid</USER_ATTRIBUTE> <!-- LDAP attribute to be considered as SpagoBI attribute -->
<USER_ATTRIBUTE name="cn">cn</USER_ATTRIBUTE> 
<USER_ATTRIBUTE name="memberOf">memberOf</USER_ATTRIBUTE>

<!-- GROUPS -->
<GROUP_SEARCH_PATH>ou=Groups</GROUP_SEARCH_PATH> <!-- SpagoBI will look for groups under this node -->
<GROUP_OBJECT_CLASS>groupOfNames</GROUP_OBJECT_CLASS> <!-- class for groups' objects -->
<GROUP_ID_ATTRIBUTE_NAME>cn</GROUP_ID_ATTRIBUTE_NAME> <!-- the attribute containing the name of the group -->
<GROUP_MEMBERS_ATTRIBUTE_NAME>member</GROUP_MEMBERS_ATTRIBUTE_NAME>

<GROUP_ATTRIBUTE name="cn">cn</GROUP_ATTRIBUTE>
<GROUP_ATTRIBUTE name="member">member</GROUP_ATTRIBUTE>
<ACCESS_GROUP_NAME>icilszx</ACCESS_GROUP_NAME> <!-- Access group name: if specified, users must belong to this group in order to enter SpagoBI -->
  <!-- this attribute has to contain the list of users belonging to this group, in case the ACCESS_GROUP_NAME is specified -->

********
389
********
****** 
DC=***，DC=com
ou=人
苹果用户
液体
cn
成员
液体
cn
成员
ou=组
群名
cn
成员
cn
成员
icilszx

感谢有人能给我一些想法。

ou=Groups

对于此行，ou=ou的名称，因为我不确定您的ou的名称是否为Groups

groupOfNames

这行我用的是groupOfUniqueNames

成员

这一行您需要输入ou名称，因为您希望此组上的用户可以访问或为空进行测试

<GROUP_MEMBERS_ATTRIBUTE_NAME>member</GROUP_MEMBERS_ATTRIBUTE_NAME>