anchor.diff:            ";
           };
   
  +        timeLimit = mkOption {
  +          default = 0;
  +          type = with pkgs.lib.types; int;
  +          description = "
  +            Specifies the time limit (in seconds) to use when performing
  +            searches. A value of zero (0), which is the default, is to
  +            wait indefinitely for searches to be completed.
  +          ";
  +        };
  +
           bind = {
             distinguishedName = mkOption {
               default = "";
  
positive.code:             description = "
                The path to a file containing the credentials to use when binding
                to the LDAP server (if not binding anonymously).
              ";
            };
          };
  
negative.code:           ''
              uri ${config.users.ldap.server}
              base ${config.users.ldap.base}
              timelimit ${toString config.users.ldap.timeLimit}
              bind_timelimit ${toString config.users.ldap.bind.timeLimit}
              bind_policy ${config.users.ldap.bind.policy}
  
              ${optionalString config.users.ldap.useTLS ''
                ssl start_tls
  