We are looking to use Joomla in education K - 12 and networks use mostly Novell's eDirectory, but there a some Windows 2003 AD networks as well. The LDAP auth system works very well, when all users are members of the same OU, but most schools keep there users for maintenance reasons in different OUs. When using the LDAP auth tools and configuring User DN: 'The [username] keyword is dynamically replaced by the user-provided login, so an example string is: uid=[username], dc=my-domain, dc=com. Several strings can be used, separated by semicolons.'
When configuring the string as: cn=[username],ou=staff,o=org;cn=[username],ou=students,o=org the search is shown as cn=name,ou=staff,o=org,ou=students,o=org which then has to fail. I have written several LDAP authentication mechanisms in PHP for AD and eDirectory. I am currently looking at Sam's code and see where it can be adjusted to provide that authentication where users are members of different OUs.