anchor.diff:  Error determining LDAP group membership for "<group>": membership lookup for user "<user>" in group "<group>" failed because of "search for entry with base dn="<user-dn>" and filter "<filter>" did not return any results".
   ----
   
  -This often indicates a mis-configured `usersQuery`. However, in cases where the
  -group contains member entries that are known to be missing, setting 
  -`tolerateMemberNotFoundErrors: true` will allow the group sync to continue. Problematic
  -members will be ignored.
  +This often indicates a mis-configured `usersQuery` field. However, in cases
  +where the group contains member entries that are known to be missing, setting
  +`tolerateMemberNotFoundErrors: true` allows the group sync to continue.
  +Problematic members will be ignored.
   
   [WARNING]
   ====
  -Enabling error tolerances for the LDAP group sync will cause the sync process to ignore
  -problematic member entries. If the LDAP group sync is not configured correctly, this could
  -result in synced OpenShift groups missing members.
  +Enabling error tolerances for the LDAP group sync causes the sync process to
  +ignore problematic member entries. If the LDAP group sync is not configured
  +correctly, this could result in synced {product-title} groups missing members.
   ====
   
   .LDAP Entries Using RFC 2307 Schema With Problematic Group Membership: *_rfc2307_problematic_users.ldif_*
  
positive.code:     tolerateMemberNotFoundErrors: true <1>
      tolerateMemberOutOfScopeErrors: true <2>
  ----
  <1> When `true`, the sync job will tolerate groups for which some members were not found.
  If this is `true`, members whose LDAP entries are not found will be ignored. The default
  behavior for the sync job is to fail if a member of a group is not found.
  <2> When `true`, the sync job will tolerate groups for which some members are outside
  the user scope given in the `usersQuery` base DN. If this is `true`, members outside the
  member query scope will be ignored. The default behavior for the sync job is to fail if a
  member of a group is out of scope.
  ====
  
  
negative.code:   member: cn=INVALID,ou=users,dc=example,dc=com <1>
    member: cn=Jim,ou=OUTOFSCOPE,dc=example,dc=com <2>
  ----
  <1> A member that does not exist on the LDAP server.
  <2> A member that may exist, but is not under the `baseDN` in the
  user query for the sync job.
  ====
  
  