Don't know if having multiple Base DNs can work, but you can use %variables in it. We use this one to be able to have a simple onelevel scope on all lookups: base = ou=people,o=%d,o=ISP,o=example,c=com scope = onelevel -jf