When using LDAP as a backend, don't forget to set workgroup.