Ldap and AD users loops in the login page

Hi
I am trying to make our Linux users to able to login on the web interface. Our Linux users’ accounts are managed by AD, with schema extension.

But somehow after the user login, the shinyproxy loops back to the login page. If I type a wrong username or password it displays :
Could not sign in!
Invalid user name or password.

So, apparently, user has logged on. but on the server logs:

2021-02-03 11:05:23.510 ERROR 6453 — [XNIO-1 task-1] io.undertow.request : UT005023: Exception handling request to /login

org.springframework.ldap.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-03100213, problem 2001 (NO_OBJECT), data 0, best match of:
‘DC=abc,DC=def,DC=comp,DC=uk’
^@]; nested exception is javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-03100213, problem 2001 (NO_OBJECT), data 0, best match of:
‘DC=abc,DC=def,DC=comp,DC=uk’
^@]; remaining name ‘ou=Groups’

my configuration:
ldap:
url: ldaps://1.2.3.4:389/dc=abc,dc=def,dc=comp,dc=uk
manager-dn: cn=***,cn=Users,dc=abc,dc=def,dc=comp,dc=uk
manager-password: ****
user-search-filter: (sAMAccountName={0})
group-search-filter: (member={0})
group-search-base: ou=Groups

please can anyone help?

best regards
Zhicheng Wang