All of the things you mentioned are possible with the patch John Morrissey.
He has made both patches available for ip and domain based hosting support. Search with a variable basedn is what you are asking for. Allows for duplicate user names not in the same directory tree. Great Idea! We use it ourselves. (Thanks John) Gene Parks VIP Direct
