I have a AD like this

and my fog ldap config
base dn: ou=abc,dc=tmbao,dc=com
group dn: ou=abc,dc=tmbao,dc=com
admin group: admin
template MS-AD
.
Bind dn: cn=administrator,ou=admin,ou=abc,dc=tmbao,dc=com

Fog still say can’t bind 

Please have a look, i ran over the forum but old post’s imgae got delete 