MS AD in SAP EP SP12 (groups are found but not users)

Question

Hi,
I have a problem with configuring MS AD for SAP EP SP12 (6.40). At the moment, in the portal I cannot logon with my AD users, but I can search for groups in AD. I've tried various different .xml config files, but now I am using the same settings as I did with an existing working SP2 portal.
I've looked at the documentation in http://help.sap.com/saphelp_erp2004/helpdata/en/cc/cdd93f130f9115e10000000a155106/frameset.htm
and if I use the config tool->UME LDAP Data <b>both the connection test and the authentication test works with my samaccountname. </b>
When I trace the authentication test I see the following packets:
1. BIND as my user defined in the settings
2. BIND successful
3. Search with BASEDN: OU=PEOPLE,DC=COMPANY,DC=NET
   Filter: (&(objectclass=User)(samaccountname=dapa))
   Attribute: objectclass
4. Response to search, found user
   Distinguised name: CN=Dagfinn Parnas,OU=Stavanger,OU=PEOPLE,DC=COMPANY,DC=NET
   Attribute: objectClass
   Value:top
   Value: person
   Value: organizationalPerson
   Value: user
5. Bind request with DN: CN=Dagfinn Parnas,OU=Stavanger,OU=PEOPLE,DC=COMPANY,DC=NET and my password
6. Bind successful
When I try to login to the portal, I can see the portal communicates with the AD server and sends the following packets:
1. 1. BIND as my user defined in the settings
2. BIND successful
3. Search with BASEDN: OU=PEOPLE,DC=COMPANY,DC=NET
   Filter: (&(objectclass=User)(samaccountname=dapa))
   Attribute: cn
   Attribute: description
   Attribute: uid
4. Response to search, found user
   Distinguised name: CN=Dagfinn Parnas,OU=Stavanger,OU=PEOPLE,DC=COMPANY,DC=NET
   Attribute: cn
       Value: Dagfinn Parnas
5. No more traffic
So it seems that it finds the correct user, but the portal doesn't do a bind against AD with this user and log me on to the portal afterwards.
<b>Could the problem be that only the cn attribute is sent back (not the description and uid which I asked for as well)?</b>
I tried setting mapping the uniquename to cn also(as described in http://help.sap.com/saphelp_erp2004/helpdata/en/1a/2bee408a63732ae10000000a155106/content.htm), but to no avail.
Some snippets from my config file
[code]
<principal type="account">
                         <nameSpaces>
                              <nameSpace name="com.sap.security.core.usermanagement">
                                   <attributes>
                                        <attribute name="j_user">
                                             <physicalAttribute name="samaccountname"/>
                                        </attribute>
                                        <attribute name="j_password">
                                             <physicalAttribute name="unicodepwd"/>
                                        </attribute>
                                        <attribute name="userid">
                                             <physicalAttribute name="null"/>
                                        </attribute>
                                   </attributes>
                              </nameSpace>
                         </nameSpaces>
                    </principal>
<principal type="user">
                         <nameSpaces>
                              <nameSpace name="com.sap.security.core.usermanagement">
                                   <attributes>
                                        <attribute name="firstname">
                                             <physicalAttribute name="givenname"/>
                                        </attribute>
                                        <attribute name="displayname">
                                             <physicalAttribute name="displayname"/>
                                        </attribute>
                                        <attribute name="lastname">
                                             <physicalAttribute name="sn"/>
                                        </attribute>
                                        <attribute name="fax">
                                             <physicalAttribute name="fax"/>
                                        </attribute>
                                        <attribute name="uniquename">
                                             <physicalAttribute name="samaccountname"/>
                                        </attribute>
                                        <attribute name="loginid">
                                             <physicalAttribute name="null"/>
                                        </attribute>
                                        <attribute name="email">
                                             <physicalAttribute name="mail"/>
                                        </attribute>
                                        <attribute name="mobile">
                                             <physicalAttribute name="mobile"/>
                                        </attribute>
                                        <attribute name="telephone">
                                             <physicalAttribute name="telephone"/>
                                        </attribute>
                                        <attribute name="department">
                                             <physicalAttribute name="ou"/>
                                        </attribute>
                                        <attribute name="description">
                                             <physicalAttribute name="description"/>
                                        </attribute>
                                        <attribute name="streetadress">
                                             <physicalAttribute name="postaladdress"/>
                                        </attribute>
                                        <attribute name="pobox">
                                             <physicalAttribute name="postofficebox"/>
                                        </attribute>
                                        <attribute name="preferredlanguage">
                                             <physicalAttribute name="preferredlanguage"/>
                                        </attribute>                                        
                                   </attributes>
                              </nameSpace>
                              <nameSpace name="com.sap.security.core.usermanagement.relation">
                                   <attributes>
                                        <attribute name="PRINCIPAL_RELATION_PARENT_ATTRIBUTE">
                                             <physicalAttribute name="memberof"/>
                                        </attribute>
                                   </attributes>
                              </nameSpace>
                         <nameSpace name="$usermapping$">
                                      <attributes>
                                           <attribute name="REFERENCE_SYSTEM_USER">
                                                <physicalAttribute name="sapusername"/>
                                           </attribute>
                                      </attributes>
                                 </nameSpace>
                         </nameSpaces>
                    </principal>
[/code]

Answer 1

Got it working by clicking twice the checkbox in front of the field  "Use UME Unique with LDAP unique".
This updated the value from uid to samaccountname (which it should have read from the config xml file allready)