LDAP authentication module does not iterate users/groups under CN-s

LDAP authentication module does not iterate users/groups under CN-s. In my configuration baseContext="dc=company,dc=com". Neither users under "cn=users,dc=company,dc=com" nor groups under "cn=builtin,dc=company,dc=com" will not be available for authentication purposes. Affects LDAP trees that contain OU-s/users outside standard user containers and multidomain trees.