FBA for AD users not working

Question

I have an external AD domain with no trust. I am trying to set up FBA with AD. This is not involving SQL server but involving the AD directly with account and populating them. SP admin before me had set it up for Novell E directory. I had opened another
thread regarding this with some info but since that thread has been marked as answered i am opening this new one.
The last thread is here:http://social.msdn.microsoft.com/Forums/en-US/43f2b263-d8de-4d2f-8d41-82e919c9377f/can-we-have-more-than-1-memebrship-provider-in-sts-token-service?forum=sharepointadmin
I am following the steps defined in the following article: http://mirzafarhan.wordpress.com/2014/02/07/sharepoint-2013-configuring-claim-based-authentication-for-use-with-active-directory-ldap/
External domain: ext.oma.edu
User inputs following while registering: First Name , Last name and email id. User gets user name and password.
My code for STS
<membership>
<providers>
<add name=”EXTMember“
type=”Microsoft.Office.Server.Security.LdapMembershipProvider,
Microsoft.Office.Server, Version=15.0.0.0, Culture=neutral,
PublicKeyToken=71e9bce111e9429c”
server=”ext.oma.edu“
port=”389″
useSSL=”false”
userDNAttribute=”distinguishedName”
userNameAttribute=”sAMAccountName”
userContainer=”CN=Users,OU=SharePoint,OU=Managed,DC=oma,DC=edu“
userObjectClass=”person”
userFilter=”(ObjectClass=person)”
scope=”Subtree”
otherRequiredUserAttributes=”sn,givenname,cn”
connectionUsername=”ext\admin“
connectionPassword=”password” />
</providers>
</membership>
<roleManager enabled=”true” defaultProvider=”AspNetWindowsTokenRoleProvider” >
<providers>
<add name=”EXTRole“
type=”Microsoft.Office.Server.Security.LdapRoleProvider,
Microsoft.Office.Server, Version=15.0.0.0, Culture=neutral,
PublicKeyToken=71e9bce111e9429c”
server=”ext.oma.edu“
port=”389″
useSSL=”false”
groupContainer=”CN=Users,OU=SharePoint,OU=Managed,DC=oma,DC=edu“
groupNameAttribute=”cn”
groupNameAlternateSearchAttribute=”samAccountName”
groupMemberAttribute=”member”
userNameAttribute=”sAMAccountName”
dnAttribute=”distinguishedName”
groupFilter=”(ObjectClass=group)”
userFilter=”(ObjectClass=person)”
scope=”Subtree”
connectionUsername=”ext\admin“
connectionPassword=”password” />
</providers>
</roleManager>
Is everything i am doing correct. Two questions: What do i pass for CN? Is it plain user or connectionusername admin?
Also do i create new <system.web> section to add this or i use the existing section where another fba has been configured? As soon as i add this another fba stops functioning? Please provide me with some idea.
Adit

Answer 1

How to query multiple OUs using FBA connection ? 
<add name=”EXTMember“
type=”Microsoft.Office.Server.Security.LdapMembershipProvider,
Microsoft.Office.Server, Version=15.0.0.0, Culture=neutral,
PublicKeyToken=71e9bce111e9429c”
server=”ext.oma.edu“
port=”389″
useSSL=”false”
userDNAttribute=”distinguishedName”
userNameAttribute=”sAMAccountName”
userContainer=”DC=oma,DC=edu“
userObjectClass=”person”
userFilter=”(ObjectClass=person)(|(ou=staff)(ou=manged))”
scope=”Subtree”
otherRequiredUserAttributes=”sn,givenname,cn”
connectionUsername=”ext\admin“
connectionPassword=”password” />
</providers>
Adit