anchor.diff:            description = ''
               Specifies the time limit (in seconds) to use when connecting
               to the directory server. This is distinct from the time limit
  -            specified in <literal>users.ldap.timeLimit</literal> and affects
  +            specified in <option>users.ldap.timeLimit</option> and affects
               the initial server connection only.
             '';
           };
  
positive.code: 
      users.ldap = {
  
        enable = mkOption {
          type = types.bool;
          default = false;
          description = "Whether to enable authentication against an LDAP server.";
        };
  
        loginPam = mkOption {
          type = types.bool;
          default = true;
          description = "Whether to include authentication against LDAP in login PAM";
        };
  
        nsswitch = mkOption {
          type = types.bool;
          default = true;
          description = "Whether to include lookup against LDAP in NSS";
        };
  
        server = mkOption {
  
negative.code:         type = types.lines;
          description = ''
            Extra configuration options that will be added verbatim at
            the end of the ldap configuration file (<literal>ldap.conf(5)</literal>).
            If <option>users.ldap.daemon</option> is enabled, this
            configuration will not be used. In that case, use
            <option>users.ldap.daemon.extraConfig</option> instead.
          '' ;
        };
  
  