anchor.diff:          baseDN: "ou=users,dc=example,dc=com"
           scope: sub
           derefAliases: never
  -        filter: (objectclass=inetOrgPerson)
           pageSize: 0
       userUIDAttribute: dn <6>
       userNameAttributes: [ mail ] <7>
  
positive.code: <2> When `true`, no TLS connection is made to the server. When `false`, secure
  LDAP (`ldaps://`) URLs connect using TLS, and insecure LDAP (`ldap://`) URLs are
  upgraded to TLS.
  <3> The attribute that uniquely identifies a group on the LDAP server.
  <4> The attribute to use as the name of the Group.
  <5> The attribute on the group that stores the membership information.
  <6> The attribute that uniquely identifies a user on the LDAP server.
  <7> The attribute to use as the name of the user in the {product-title} Group record.
  ====
  
  
negative.code:         baseDN: "ou=groups,dc=example,dc=com"
          scope: sub
          derefAliases: never
      groupUIDAttribute: dn
      groupNameAttributes: [ cn ]
      groupMembershipAttributes: [ member ]
  