OS : Windows 2008 R2
Version RTC 3.0

I have following configuration on my active directory.
------------------------------------------------
sample.test.com (dc=sample, dc=test, dc=com)
- AllGroups (ou)
- JazzAdmins (Group)
- JazzUsers (Group)
- JazzDWAdmins (Group)
- JazzProjectAdmins (Group)
- JazzGuests (Group)
- TestGroup (ou)
- JazzGroup1 (Group)

- AllUsers (ou)
- jtsadmin (User)
- JazzAccount (ou)
- testUser1 (User)
------------------------------------------------


During setup wizard, I entered following value on both "Base User DN" and "Base Group DN".

dc=sample, dc=test, dc=com


The setup has been does well(no error) but after the setup, when I tried to see the detail of a user, following error happened.

---------------------------------------------------------------
Problem fetching user roles: CRJAZ0738I Error fetching groups for user
---------------------------------------------------------------

Then, I changed the value of "Base User DN" and "Base Group DN" as follows.

Base User DN:
ou=AllUsers, dc=sample, dc=test, dc=com

Base Group DN:
ou=AllGroups, dc=sample, dc=test, dc=com


After the change, the error has been solved.
And I found following technote.
http://www-01.ibm.com/support/docview.wss?uid=swg21431326

In the technote, "Correct errors in the configuration. " is mentioned but it is not mentioned how to correct it.

So please let me ask a following question.

After "ou" was added to both "Base User DN" and "Base Group DN", the error was solved.

Does that mean "ou" is necessary in the value of both "Base User DN" and "Base Group DN"?


Also, I have an additional question.
As I mentioned the configuration on my active directory above, "ou" of group and user are nested, like TestGroup (ou) is under AllGroups (ou) and JazzAccount (ou) is under AllUsers (ou).

Is this configuration ok?
As far as I have tested, there is no problem.
So I just want to verify with someone who is familiar with this configuration.