anchor.diff:  [[configuring-ldap-realm]]
   === Configuring an LDAP realm
   
  -You can configure {security} to communicate with a Lightweight Directory Access
  -Protocol (LDAP) server to authenticate users. To integrate with LDAP, you
  -configure an `ldap` realm and map LDAP groups to user roles.
  +You can configure {es} to authenticate users by communicating with a Lightweight
  +Directory Access Protocol (LDAP) server. To integrate with LDAP, you configure
  +an `ldap` realm and map LDAP groups to user roles.
   
   For more information about LDAP realms, see 
  -{xpack-ref}/ldap-realm.html[LDAP User Authentication].
  +{stack-ov}/ldap-realm.html[LDAP User Authentication].
   
   . Determine which mode you want to use. The `ldap` realm supports two modes of 
   operation, a user search mode and a mode with specific templates for user DNs. 
  
positive.code:           bind_dn: "cn=ldapuser, ou=users, o=services, dc=example, dc=com"
            user_search:
              base_dn: "dc=example,dc=com"
              attribute: cn
            group_search:
              base_dn: "dc=example,dc=com"
            files:
  
negative.code: --
  By default, `ldap_dn` and `ldap_groups` are populated in the user's metadata. 
  For more information, see 
  {stack-ov}/ldap-realm.html#ldap-user-metadata[User Metadata in LDAP Realms]. 
  
  The example below includes the user's common name (`cn`) as an additional
  field in their metadata.
  