Although I do not know how you would put the variables in you can design the Variable BaseDN to search based on what you put in the username field i.e. [EMAIL PROTECTED] if the user does not supply the domain or realm then it can always default back to searching the entire LDAP tree.
We did that on our Radius servers but it is much easier to do that in those than in this.
