anchor.diff:            ''
               uri ${config.users.ldap.server}
               base ${config.users.ldap.base}
  +            timelimit ${toString config.users.ldap.timeLimit}
  +            bind_timelimit ${toString config.users.ldap.bind.timeLimit}
  +            bind_policy ${config.users.ldap.bind.policy}
   
               ${optionalString config.users.ldap.useTLS ''
                 ssl start_tls
  
positive.code:             description = "
                The path to a file containing the credentials to use when binding
                to the LDAP server (if not binding anonymously).
              ";
            };
          };
  
negative.code:           ";
          };
  
          timeLimit = mkOption {
            default = 0;
            type = with pkgs.lib.types; int;
            description = "
              Specifies the time limit (in seconds) to use when performing
              searches. A value of zero (0), which is the default, is to
              wait indefinitely for searches to be completed.
            ";
          };
  
          bind = {
            distinguishedName = mkOption {
              default = "";
  