- type: ldap
              id: lldap
              name: LLDAP
              config:
                host: lldap.ldap-test # make sure it does not start with `ldap://`
                port: 389 # or 6360 if you have ldaps enabled
                insecureNoSSL: true # or false if you have ldaps enabled
                insecureSkipVerify: true # or false if you have ldaps enabled
                bindDN: uid=admin,ou=people,dc=example,dc=com # replace admin with your admin user
                bindPW: xxxxxxxxxxxxxx # replace with your admin password
                userSearch:
                  baseDN: ou=people,dc=example,dc=com
                  username: uid
                  idAttr: uid
                  emailAttr: mail
                  nameAttr: displayName
                  preferredUsernameAttr: uid
                groupSearch:
                  baseDN: ou=groups,dc=example,dc=com
                  filter: "(objectClass=groupOfUniqueNames)"
                  userMatchers:
                  - userAttr: uid
                    groupAttr: member
                  nameAttr: cn