The majority of what you suggested does work.
However when it comes to adding people to the internal database I have to change the property for:
When this is changed, the connection with LDAP is lost but when I change it back to:
It then auths against db and ldap.
Is there anyway I can do both at the same time without having to keep changing the properties each time I need to add a new user?