thank you npc423, finally a good explanation.Just to make it clearer the
"Common Name Identifier" field should contain only sAMAccountName.not
something like cn=sAMAccountName. Is there a way to use the LDAP users
without adding them to the user list...