I finally figured out what I was doing wrong. I had assumed (wrongly) that the getUserFromContainer method would search sub-containers as well. This isn't the case it just does a single level search. Once I pointed it at the specific container it worked just fine.
It would be nice to have something that did a sub-search as well.
Thanks to everyone for the insight.