OU Filtering without altering the base string

[Arcath]

Altering the base string to do OU filtering is a bit constricting as a structure of

Base
  IT
  Dev
  Mangement

would only allow you to limit to one of those OUs, if you wanted to limit to both IT and Dev you would need to change your structure or add some security groups. It would be a lot better if there was a multi value attribute that returned an array of the OUs a user is a member of allowing for the same filtering as groups