(no title)
Try a DNS-SD lookup to find a domain-specific LDAP server before resorting to keys.{domain}.