Thanks, it will be nice to cleanup some of those installation null refs.
Looking at the LDAP changes, it seems we are just effectively changing the base dn for syncing. It's not really a group filter. This leaves the authentication alone to use the original base dn. I wonder if we should just have 2 fields, it's basically just semantics at this point.
Authentication Base DN
Computer Sync Base DN
Which then leads into what if we want multiple DN's. Feel free to do as much or as little with this. At the very least you've motivated me to dig deeper into this for the next release.
Thanks again.