Active Directory authorisation with jid's like "user@domain" and just "user"

Greatings!!! After hours in searchings decided to ask here about my problem...

situation:
* debian + ejabberd 2 + auth with AD (Windows 2008) works fine with jid's like "user@domain.org"

question:
* what can i do for authorisation jid like "user" (without "@domain.org").

Problem appeared when i tried to authenticate from Pandion ang Gajim with NTLM option. (unfortunately I did not find any confirmation in LOG with level DEBUG, but I think that reason is jid)

I hope for your help... where to dig?

-----------cut--------------------------------

%% Admin user
{acl, admin, {user, "jabber", "domain.org"}}.
%% Hostname
{hosts, ["domain.org"]}.
%%Auth LDAP
{auth_method, ldap}.
{ldap_servers, ["10.20.30.3"]}.
{ldap_port, 389}.
{ldap_rootdn, "CN=jabber,CN=Users,DC=domain,DC=org"}.
{ldap_password, "blank"}.
{ldap_base, "dc=domain,dc=org"}.
{ldap_uids, [{"userPrincipalName", "%u@domain.org"}]}.
{ldap_uidattr, "SamAccountName"}.
{ldap_filter, "(objectCategory=person)"}.
-----------cut--------------------------------