text: – User Attribute 
  
  This LDAP attribute is used to determine the user name of remote users. The attribute 
  must exist in your LDAP schema and must be unique for each of your users. 
  
  This advanced setting defaults to sAMAaccountName for Microsoft Active Directory and to 
  uid for IBM Security Directory Server and OpenLDAP. 
  
  – Group Attribute 
  
  This LDAP attribute is used to determine the user group memberships of remote users. 
  The attribute must contain either the distinguished name of a group or a 
  colon-separated list of group names. 
  
  This advanced setting defaults to memberOf for Microsoft Active Directory and 
  OpenLDAP and to ibm-allGroups for IBM Security Directory Server. For OpenLDAP 
  implementations, you might need to configure the memberOf overlay if it is not in place. 
  
  – Audit Log Attribute 
  
  This LDAP is attribute used to determine the identity of remote users. When an LDAP 
  user performs an audited action, this identity is recorded in the audit log. This 
  advanced setting defaults to userPrincipalName for Microsoft Active Directory and to 
  uid for IBM Security Directory Server and OpenLDAP. 
  
  3. Enter the server settings for one or more LDAP servers, as shown in Figure 4-28 on 
  page 113. To add servers, click the plus (+) icon. The following settings are available: 