When authenticating against LDAP, not always all users are in the same sub-tree of ldap, so it is necesary to support authentication against multiple branches of ldap.
For example, there can be users who can authenticate using the cn=%s,ou=myCity,ou=myState,o=myCompany but others can authenticate using the cn=%s,ou=ANOTHERCity,ou=myState,o=myCompany