Absolutely, here is the output of those commands. I'm using an IP so I think we can rule out DNS.
```
root@login:~# /opt/opendj/bin/ldapsearch -h 127.0.0.1 -p 1636 -s sub -Z -X -D 'cn=directory manager' -j /tmp/.dpw -b 'o=gluu' -z 3 '(&(objectclass=oxtrustconfiguration))' oxTrustConfCacheRefresh
dn: ou=oxtrust,ou=configuration,o=gluu
oxTrustConfCacheRefresh: {"sourceConfigs":[{"configId":"MYORGAD","bindDN":"CN=Service LDAP,CN=Managed Service Accounts,DC=MYORG,DC=LOC","bindPassword":"MY_PW_1","servers":["10.10.30.27:389"],"maxConnections":5,"useSSL":false,"baseDNs":["OU=MYORG,DC=MYORG,DC=LOC"],"primaryKey":null,"localPrimaryKey":null,"useAnonymousBind":false,"enabled":false,"version":0,"level":0}],"inumConfig":{"configId":"local_inum","bindDN":"cn=directory manager","bindPassword":"MY_PW_2","servers":["localhost:1636"],"maxConnections":10,"useSSL":true,"baseDNs":["ou=cache-refresh,o=site"],"primaryKey":null,"localPrimaryKey":null,"useAnonymousBind":false,"enabled":true,"version":0,"level":0},"targetConfig":{"configId":null,"bindDN":null,"bindPassword":null,"servers":[],"maxConnections":0,"useSSL":false,"baseDNs":[],"primaryKey":null,"localPrimaryKey":null,"useAnonymousBind":false,"enabled":false,"version":0,"level":0},"ldapSearchSizeLimit":1000,"keyAttributes":["sAMAccountName"],"keyObjectClasses":["user"],"sourceAttributes":["cn","sn","mail","givenName","company","c","displayName"],"customLdapFilter":"","updateMethod":"copy","defaultInumServer":false,"keepExternalPerson":true,"useSearchLimit":false,"attributeMapping":[{"source":"sAMAccountName","destination":"uid"},{"source":"c","destination":"c"},{"source":"sn","destination":"sn"},{"source":"mail","destination":"mail"},{"source":"givenName","destination":"givenName"},{"source":"displayName","destination":"displayName"},{"source":"company","destination":"o"},{"source":"co","destination":"co"}],"snapshotFolder":"/var/gluu/identity/cr-snapshots","snapshotMaxCount":20}
root@login:~# /opt/opendj/bin/ldapsearch -h 127.0.0.1 -p 1636 -s sub -Z -X -D 'cn=directory manager' -j /tmp/.dpw -b 'o=gluu' -z 3 '&(objectclass=gluuConfiguration)' oxIDPAuthentication
dn: ou=configuration,o=gluu
oxIDPAuthentication: {"type":"auth","name":"MYORGAD","level":0,"priority":0,"enabled":true,"version":1,"fields":[],"config":{"configId":"MYORGAD","bindDN":"CN=Service LDAP,CN=Managed Service Accounts,DC=MYORG,DC=LOC","bindPassword":"MY_PW_1","servers":["10.10.30.27:389"],"maxConnections":10,"useSSL":false,"baseDNs":["OU=MYORG,DC=MYORG,DC=LOC"],"primaryKey":"sAMAccountName","localPrimaryKey":"uid","useAnonymousBind":false,"enabled":true,"version":0,"level":0}}
oxIDPAuthentication: {"type":"auth","name":"auth_ldap_server","level":0,"priority":0,"enabled":true,"version":1,"fields":[],"config":{"configId":"auth_ldap_server","bindDN":"cn=directory manager","bindPassword":"MY_PW_2","servers":["localhost:1636"],"maxConnections":1000,"useSSL":true,"baseDNs":["ou=people,o=gluu"],"primaryKey":"uid","localPrimaryKey":"uid","useAnonymousBind":false,"enabled":true,"version":0,"level":0}}
```
Proof of the container reaching the backend AD server:
```
root@login:~# /opt/opendj/bin/ldapsearch -h 10.10.30.27 -p 389 -s sub -X -D 'CN=Service LDAP,CN=Managed Service Accounts,DC=MYORG,DC=LOC' -w 'MY_PW_3' -b 'OU=MYORG,DC=MYORG,DC=LOC' -z 3 '(&(&(objectClass=top))(&(sAMAccountName=testacct1)))' sAMAccountName
dn: CN=Test Acct1,OU=Users,OU=MYORG,DC=MYORG,DC=LOC
sAMAccountName: testacct1
```
My hunch is that it's not even trying to reach the backend ldap server when a user attempts to sign in. I could be wrong. :)