anchor.diff:  cn: John Doe
   displayName: John Doe
   userPassword: badger
  -```
  +~~~
   
   Execute below command to add user to ldap.
   
  -```
  +~~~ shell
   ldapadd -x -D cn=admin,dc=gocd,dc=org -W -f add.ldif
  -```
  +~~~
   
   **Output**
   
  -```
  +~~~ shell
   ldapadd -x -D cn=admin,dc=gocd,dc=org -W -f add.ldif
   Enter LDAP Password:
   adding new entry  "ou=People,dc=gocd,dc=org"
  
positive.code: 
  Users can also configure this via **Config XML** tab on the Admin section:
  
  ```
   <security>
        <authConfigs>
          <authConfig id="OpenLDAP" pluginId="cd.go.authentication.ldap">
  
negative.code: 
  At this point, your LDAP server is configured and running. Open up the LDAP port on your firewall so external clients can connect:
  
  ~~~ shell
  sudo ufw allow ldap
  ~~~
  
  Let's test our LDAP connection using ldapwhoami, which should return the username we're connected as:
  
  ~~~ shell
  ldapwhoami -H ldap:// -x
  ~~~
  
  **Output**
  
  ~~~ shell
  anonymous
  ~~~
  
  This should give you “anonymous” as result, since we ran it without logging into the LDAP server. This means the LDAP server is running and responding.
  
  If this gives you connect error something similar to below, try checking the ldap service status **/etc/init.d/slapd status** and restart if it is stopped.
  
  ~~~ shell
  ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)
  ~~~
  
  Next we'll add a user to the OpenLDAP server and see if we are able to connect.
  
  
  ##**Step 2 — Add user to ldap server**
  
  Create an add.ldif file and add below content for user details.
  
  ~~~ shell
  dn: ou=People,dc=gocd,dc=org
  objectClass: organizationalUnit
  ou: People
  