LDAP lookup against AD with multiple domains