AD auth error on graylog setup

I have been trying a variety of combinations of your configurations above and have been unable to reproduce your error. I did find a couple of threads talking about the same issue, though. Do either of the following apply?

A common theme mentioned by @jan is a problem with group nesting.