ldap { #Note that this needs to match the name in the LDAP #Server certificate, if you.re usin ldaps. server = "192.168.0.10" identity = "cn=neo,cn=users,dc=example,dc=com" password = password123# basedn = "cn=users,dc=example,dc=com" filter = "(&(sAMAccountName=%{Stripped-User-Name:-%{User-Name}}))" # Group membership checking. Disabled by default. groupname_attribute = cn groupmembership_filter = "(|(&(objectClass=group)(member=%Ldap-UserDn}))(&(objectClass=top)(uniquemember=%{Ldap-UserDn})))" groupmembership_attribute = memberOf }