Also, make sure that the admin user from AD is in the "Manager" group in the Gluu LDAP server. In a pinch, you can do this writing an ldif and using `/opt/opedj/bin/ldapmodify`
Non sequitur, but make sure that oxTrust is not Internet facing when you go into production.