hosts = ldap.example.com dn = cn=admin,dc=example,dc=com dnpass = s3cr3t base = dc=example,dc=com scope = subtree user_filter = (&(mail=%u)(&(objectClass=inetOrgPerson)(memberOf=cn=email,ou=groups,dc=example,dc=com))) pass_filter = (&(mail=%u)(&(objectClass=inetOrgPerson)(memberOf=cn=email,ou=groups,dc=example,dc=com))) user_attrs = mail=/var/mail/%{ldap:mail}