Evil LDAP Trickery

Before you even try to use LDAP authentication between APEX and Microsoft's Active Directory, you need to remember that MSAD is NOT standard. Do not, repeat, do not use a DN structure such as DN=userid, OU=people, DC=your, DC=domain, DC=com. The DN Microsoft's AD wants is domain\userid. Very VERY frustrating.