LDAP Authentication single OU works - now how to search whole domain?

This continues from here ERPNext Active Directory