apparently it's order-sensitive

git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@6856 71c3de6d-444a-0410-be80-ed276b4c234a

war/resources/WEB-INF/security/LDAPBindSecurityRealm.groovy

@@ -22,6 +22,10 @@ initialDirContextFactory(DefaultInitialDirContextFactory, instance.getLDAPURL()
   // managerPassword="..."
 }
 
+ldapUserSearch(FilterBasedLdapUserSearch, instance.userSearchBase, instance.userSearch, initialDirContextFactory) {
+    searchSubtree=true
+}
+
 bindAuthenticator(BindAuthenticator,initialDirContextFactory) {
     // this is when you the user name can be translated into DN.
 //  userDnPatterns = [
@@ -31,11 +35,6 @@ bindAuthenticator(BindAuthenticator,initialDirContextFactory) {
     userSearch = ldapUserSearch;
 }
 
-ldapUserSearch(FilterBasedLdapUserSearch, instance.userSearchBase, instance.userSearch, initialDirContextFactory) {
-    searchSubtree=true
-}
-
-
 authoritiesPopulator(DefaultLdapAuthoritiesPopulator,initialDirContextFactory,"ou=groups") {
   // groupRoleAttribute = "ou";
 }