anchor.diff:  <% if @ldap['group_id_attribute'] -%>
   ldap.group.idAttribute=<%= @ldap['group_id_attribute'] %>
   <% end -%>
  +
   <% end -%>
   
   <% if !@crowd.empty? %>
  
positive.code: ldap.authentication=<%= @ldap['authentication'] %>
  <% end -%>
  
  # (omit if you use autodiscovery) URL of the LDAP server.
  # If you are using ldaps, then you should install server certificate into java truststore.
  # eg. ldap://localhost:10389
  ldap.url: ldap<%= "s" if @ldap['ssl'] %>://<%= @ldap['hostname'] %>:<%= @ldap['port'] %>
  
  # (optional) Distinguished Name (DN) of the root node in LDAP from which to search for users,
  # eg. "ou=users,o=mycompany"
  ldap.user.baseDn: <%= @ldap['user_base_dn'] %>
  
  # (optional) Bind DN is the username of an LDAP user to connect (or bind) with.
  # This is a Distinguished Name of a user who has administrative rights,
  # eg. "cn=sonar,ou=users,o=mycompany". Leave blank for anonymous access to the LDAP directory.
  ldap.bindDn: <%= @ldap['bind_dn'] %>
  
  # (optional) Bind Password is the password of the user to connect with.
  # Leave blank for anonymous access to the LDAP directory.
  ldap.bindPassword: <%= @ldap['bind_password'] %>
  
  # Login Attribute is the attribute in LDAP holding the user's login.
  # Default is '(&(objectClass=inetOrgPerson)(uid={login}))'. Set
  # '(&(objectClass=user)(sAMAccountName={login}))' for Microsoft Active Directory
  <% if @ldap['user_request'] -%>
  ldap.user.request: <%= @ldap['user_request'] %>
  <% end -%>
  
negative.code: ldap.user.emailAttribute=<%= @ldap['user_email_attribute'] %>
  <% end -%>
  
  <% if @ldap['group_base_dn'] -%>
  ldap.group.baseDn=<%= @ldap['group_base_dn'] %>
  <% end -%>
  