anchor.diff:  if `insecure` is set to `false`.
   ====
   
  +[[ldap-query-definition]]
   === LDAP Query Definition
  +
   Sync configurations consist of LDAP query definitions for the entries that are
   required for synchronization. The specific definition of an LDAP query depends
   on the schema used to store membership information in the LDAP server.
  
positive.code: <1> The name of the group as specified by the user-defined name mapping.
  ====
  
  === Active Directory
  In the Active Directory schema, both users (Jane and Jim) exist in the LDAP
  server as first-class entries, and group membership is stored in attributes on
  the user. The following snippet of `ldif` defines the users and group for this
  schema:
  
  .LDAP Entries Using Active Directory Schema: `active_directory.ldif`
  ====
  [source,ldif]
  ----
  
negative.code: objectClass: groupOfNames
  cn: admins
  owner: cn=admin,dc=example,dc=com
  description: System Administrators
  member: cn=Jane,ou=users,dc=example,dc=com
  member: cn=Jim,ou=users,dc=example,dc=com
  ----
  