Hi,

Active directory Server has a tree domain and several organization units (ou):

Tree:

-mydomain
-ou1
-ou2
-ou21
-ou22
-ou3


I can login user into ou1, ou2 and ou3, but users into ou21, ou22 I can't login.

Code:
Code:
    <beans:bean id="myLdapContextSource" class="org.springframework.security.ldap.DefaultSpringSecurityContextSource">
        <beans:constructor-arg value="ldap://10.168.1.122:389/dc=domain,dc=com"/>
        <beans:property name="userDn" value="cn=administrator,cn=Users,dc=domain,dc=com"/>
        <beans:property name="password" value="abc123"/>
    </beans:bean>

	<beans:bean id="ldapAuthProvider"
	        class="com.ssa.security.CustomLdapAuthenticationProvider">
	  <beans:constructor-arg>
	    <beans:bean class="org.springframework.security.ldap.authentication.BindAuthenticator">
	      <beans:constructor-arg ref="myLdapContextSource"/>
	      <beans:property name="userDnPatterns">
	        <beans:list>
	        <beans:value>cn={0},cn=Users</beans:value>
	        <beans:value>cn={0},ou=ou01</beans:value>
	        <beans:value>cn={0},ou=ou02</beans:value>
	        </beans:list>
	      </beans:property>
	    </beans:bean>
	  </beans:constructor-arg>
	  <beans:constructor-arg ref="ldapAuthoritiesPopulator" />
	</beans:bean>
	<authentication-manager alias="authenticationManager" >
		<authentication-provider  ref='ldapAuthProvider'/> 
	</authentication-manager>
Please, any suggestion??

Thanks,