One good tool that will help you out with these attributes is "Softerra LDAP browser" which is a freeware, however if you are using AD as the server some are already well known, for instance you would need to go ahead and connect to your AD and run the following command:

"dsquery user -name 'username'" (no quotes)

That will give you the whole path in ldap syntax to where the user lies and you can use the whole chain up to the username as the user directory subtree, it should through something like"

"CN=Administrator,CN=Users,DC=LATAM,DC=SEC"

From this you can use

CN=Users,DC=LATAM,DC=SEC

the other option Group directory are where your groups are and should be similar to the above:

UserObjectType

Most of the times is "cn"

UserObjectClass

Most of the times is "person"

GroupObjectType

Most of the times is "cn"

GroupObjectClass

Most of the times is "group"

Group Attribute Name

"member"

Mhh.. I believe since ACS does not have the query type option you would need to define an ldap context for group.. (ldap query type one level or sub tree)