Important:
When working with LDAP, the domain name should be the name of a specific domain controller (DC) node in the LDAP tree structure. There can be many DC nodes in an LDAP tree structure, and you must select the DC node that is the deepest ancestor node (parent, grandparent, and so on) of all of the user nodes. Here, deepest means furthest away from the LDAP tree's root node. For example, if the usernames in an LDAP tree structure are located in the LDAP path uid=Username,ou=People,dc=mydomain,dc=com, then both dc=mydomain and dc=com are ancestor DC nodes of the user nodes, but since dc=mydomain is deeper than dc=com, you should specify the domain name as MYDOMAIN and not COM. If the path to the user nodes does not include any DC nodes, specify the root node. For example, if a user's full path is cn=Username,ou=People,ou=RnD,o=Company, set the domain name to Company.