anchor.diff:  		#  LDAP_OPT_DEREF is set to this value.
   #		dereference = 'always'
   <%- if @dereference -%>
  -    dereference = '<%= @dereference %>'
  +		dereference = '<%= @dereference %>'
   <%- end -%>
   
   		#
  
positive.code: 		# SASL mechanism
  #		mech = 'PLAIN'
  <%- if @sasl.has_key?('mech') -%>
      mech = '<%= @sasl['mech'] %>'
  <%- end -%>
  
  		# SASL authorisation identity to proxy.
  #		proxy = 'autz_id'
  <%- if @sasl.has_key?('proxy') -%>
      proxy = '<%= @sasl['proxy'] %>'
  <%- end -%>
  
  		# SASL realm. Used for kerberos.
  #		realm = 'example.org'
  <%- if @sasl.has_key?('realm') -%>
      realm = '<%= @sasl['realm'] %>'
  <%- end -%>
  	}
  
  
negative.code: 		#  time limit). default: 20
  		#
  		#  LDAP_OPT_TIMELIMIT is set to this value.
  		srv_timelimit = <%= @timelimit %>
  
  		#  LDAP_OPT_X_KEEPALIVE_IDLE
  		idle = <%= @idle %>
  