- LDAP users intended to replace "OracleSystemUser", "weblogic" and "BISystemUser MUST" all reside in the same base DN that's used to search for users in the LDAP config
- They also MUST all be of the same objectClass as the one referenced in the LDAP config
- Creating "technical users" to distinguish them from "human users" and putting them in different branches and / or storing them as different object classes (e.g. "account" or rather than "person")
First thing you should get is an LDAP browser with which to connect to the LDAP server to check validity of the connectivity ccount (i.e. the "Principal" for LDAP connectivity) as well as structures and object types. This will save you a lot of pain and suprising behaviour due to "ceative" LDAP management.