IBM BS029ML - WebSphere Portal Server Self Help Manual page 97

Incorrect privileges for the LDAPBindID
Unless anonymous searches are allowed, the LDAPBindID should have, at a minimum,
permission to read and search a subset of the Directory Information Tree specified in the
LDAP suffix entry. Confirm the privileges of your LDAPBind user if anonymous access is not
allowed.
Failure to disable security before enabling security
Before you can run the enable security task, you must disable WebSphere Application Server
Global Security by running the disable security task through the command line or the wizard.
If you are encountering problems with running the security tasks, you must disable security
each time before you try to reenable security.
83
Chapter 3. WebSphere Portal installation