anchor.diff:    ldap:
       enabled: <%= @ldap_enabled %>
       host: '<%= @ldap_host %>'
  -    base: '<%= @ldap_base %>'
       port: <%= @ldap_port %>
       uid: '<%= @ldap_uid %>'
       method: '<%= @ldap_method %>' # "tls" or "ssl" or "plain"
  
positive.code:     # If you are using "uid: 'userPrincipalName'" on ActiveDirectory you need to
      # disable this setting, because the userPrincipalName contains an '@'.
      allow_username_or_email_login: <%= @ldap_allow_username_or_email_login %>
  
      # Filter LDAP users
      #
  
negative.code:     ## Google analytics. Uncomment if you want it
      # google_analytics_id: '_your_tracking_id'
  
      ## Piwik analytics.
      # piwik_url: '_your_piwik_url'
      # piwik_site_id: '_your_piwik_site_id'
  
      ## Text under sign-in page (Markdown enabled)
      # sign_in_text: |
      #   ![Company Logo](http://www.companydomain.com/logo.png)
  