You have multiple OUs. That's why you should search the whole domain (dn).
You may try the search filters mentioned in here ->
https://stackoverflow.com/questions/40474904/how-can-i-authenticate-a-user-in-ldap-within-multiple-ou-with-variable-levels-inThis custom auth mentioned in the below thread seems like the last resort ->
https://community.oracle.com/tech/developers/discussion/2126587/ldap-authentications-across-multiple-ou-groupsCheck this one as well ->
https://oracle-base.com/articles/misc/oracle-application-express-apex-ldap-authenticationAs far as I see, people prefer developing and placing their custom ldap mechanisms with Apex, using DBMS_LDAP.