Check to perform a subtree-scoped search within the BaseDN with the filter: <searchAttribute>=<userName>. When unchecked, a simple lookup is done for the distinguished name (DN) with this pattern: <searchAttribute>=<userName>,<baseDN>.