[c-nsp] VPN 3000 & LDAP Author

[Peder @ NetworkOblivion]

Has anybody setup LDAP authorization between a VPN 3000 and MS AD?  I 
don't mean authentication, I mean authorization.  I can get authen to 
work, but I can't figure out what to put in the various fields for 
authorization.  The setup screen on the VPN3000 has fields for the 
following:

Login DN 	
Password 		
Base DN 		
Search Scope 	One Level / Subtree
Naming attributes 		

I know a bunch of people that have lots of experience with AD, but none 
of them are LDAP guru's, so they aren't sure what to put where.  Any 
tips would be appreciated.

FYI, I opened a case with Cisco asking for help and their response was 
"Unfortunately we at Cisco cannot assist in supporting AD configuration.
Please open a case with Microsoft to help you setting up you LDAP 
server."  Apparently, Cisco has no clue what to enter in those fields 
either.  I would think it would be a fairly common requirement, but I 
guess not.