Then do magic with the settings as @tampakrap described. Direct LDAP is a mess and doesn't seem to get mocked correctly.