First my configuration setup (LDAP DIT):

dn: ou=Admins,ou=Hudson,ou=Applications,dc=example,dc=com
cn: Admin
objectClass: groupOfUniqueNames
objectClass: top
ou: Admins
uniqueMember: uid=root,ou=Users,dc=example,dc=com
uniqueMember: uid=user,ou=Users,dc=example,dc=com

(I dunno how to include screenshots, so I put them on my webserver)…

Realm configuration: http://vps01.her.boksa.de/daten/realm.png
The "glitch": http://vps01.her.boksa.de/daten/glitch.png

As you can see in the second screenshot the ""-sign implies that the entry is invalid, however it is
needed for LDAP-groups to function properly. If you need further information just let me know…