LDAP Authenticator remoteUserMapping settings

I have outlined a working configuration for multiple AD domains in a forest in this post: