ldap {
        << some ldap connection specific secret options were left out >>

        #filter = "(&(objectClass=posixAccount)(uid=%{%{Stripped-User-Name}:-%{User-Name}}))"
        filter = "(&(objectClass=posixAccount)(uid=%{mschap:User-Name:-%{User-Name}}))"

        ldap_connections_number = 5
        timeout = 4
        timelimit = 3
        net_timeout = 1
        tls {
                start_tls = no
        }
        dictionary_mapping = ${confdir}/ldap.attrmap
        edir_account_policy_check = no


        # LDAP-Group processing
        groupname_attribute = cn

        # we need to search for 'uid' or 'memberUid' because according to the schema one can only add 'memberUid' manually though the
        # ldap-autogroup overlay uses 'uid' instead (even though this is a schema violation)
        #groupmembership_filter = "(&(objectClass=posixGroup)(|(uid=%{Stripped-User-Name:-%{User-Name}})(memberUid=%{Stripped-User-Name:-%{User-Name}})))"
        groupmembership_filter = "(&(objectClass=posixGroup)(|(uid=%{mschap:User-Name:-%{User-Name}})(memberUid=%{mschap:User-Name:-%{User-Name}})))"

        groupmembership_attribute = radiusGroupName
}