external LLDAP setup

[limesTech]

Hi,
since I tried a quite some time to get Olog running and still struggle with an external LDAP service to work properly, I would like some guidance how others have done it.

If I use the embedded_ldap everything works as expected, but since it is good practice to use an external LDAP server to manage access rights during deployment I would like to use the most minimal external ldap service with an admin web GUI, like LLDAP.

ldapsearch respond as expected, but somehow if I use login masks of the olog-web-gui or the phoebus-product

2025-09-18 18:39:48 WARNING [org.phoebus.logbook.olog.ui.write.LogEntryEditorController] Unable to submit log entry
org.phoebus.logbook.LogbookException: org.phoebus.logbook.LogbookException: 
	at org.phoebus.olog.es.api.OlogHttpClient.save(OlogHttpClient.java:200)
	at org.phoebus.olog.es.api.OlogHttpClient.set(OlogHttpClient.java:155)
	at org.phoebus.logbook.olog.ui.write.LogEntryEditorController.lambda$submit$30(LogEntryEditorController.java:606)
	at org.phoebus.framework.jobs.Job.execute(Job.java:50)
	at org.phoebus.framework.jobs.JobManager.execute(JobManager.java:54)
	at org.phoebus.framework.jobs.JobManager.lambda$schedule$0(JobManager.java:45)
	at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
	at java.base/java.lang.Thread.run(Thread.java:1583)

or 401 invalid credentials.

Since it is a sensible topic, I dislike sharing my config publicly. But does anyone know what kind of dn's I'm allowed to choose?
Or what schema parts are mandatory to keep?