One More thing worth highlighting is the: “LDAP_BASE”: “ou=people,o=demo”,
Does it reflect your domains correctly?