anchor.diff:  <% if @ldap['group_id_attribute'] -%>
   ldap.group.idAttribute=<%= @ldap['group_id_attribute'] %>
   <% end -%>
  +
   <% end -%>
   
   <% if !@crowd.empty? %>
  
positive.code: ldap.user.emailAttribute=<%= @ldap['user_email_attribute'] %>
  <% end -%>
  
  ldap.group.baseDn: <%= @ldap['group_dn'] %>
  ldap.group.request: <%= @ldap['group_request'] %>
  ldap.group.idAttribute: <%= @ldap['group_id_attribute'] %>
  
  # (advanced option) See http://java.sun.com/products/jndi/tutorial/ldap/security/auth.html
  # Default is 'simple'. Possible values: 'simple', 'CRAM-MD5', 'DIGEST-MD5', 'GSSAPI'.
  #ldap.authentication: DIGEST-MD5
  
  # (advanced option)
  # See
  # http://java.sun.com/products/jndi/tutorial/ldap/security/digest.html
  # http://java.sun.com/products/jndi/tutorial/ldap/security/crammd5.html
  # eg. example.org
  #ldap.realm:
  
  # (advanced option) Context factory class.
  # Default is 'com.sun.jndi.ldap.LdapCtxFactory'.
  #ldap.contextFactoryClass: com.sun.jndi.ldap.LdapCtxFactory
  
  <% if @ldap['group_base_dn'] -%>
  ldap.group.baseDn=<%= @ldap['group_base_dn'] %>
  <% end -%>
  
negative.code: ldap.authentication=<%= @ldap['authentication'] %>
  <% end -%>
  
  <% if @ldap['user_base_dn'] -%>
  ldap.user.baseDn: <%= @ldap['user_base_dn'] %>
  <% end -%>
  <% if @ldap['user_request'] -%>
  ldap.user.request: <%= @ldap['user_request'] %>
  <% end -%>
  