When matching AD and eDir, is it necessary to specify a CN, e.g. Users, or
can you let it search the entire Domain and omit the CN?