anchor.diff:  directory tree, but you can also specify a subtree in the directory.
   <2> The scope of the search. Valid values are `base`, `one`, or `sub`. If this
   is left undefined, then a scope of `sub` is assumed. Descriptions of the scope
  -options can be found in the
  -link:../admin_guide/syncing_groups_with_ldap.html#ldap-search[table below].
  +options can be found in the link:#ldap-search[table below].
   <3> The behavior of the search with respect to aliases in the LDAP tree. Valid
   values are `never`, `search`, `base`, or `always`. If this is left undefined,
   then the default is to `always` dereference aliases. Descriptions of the
  -dereferencing behaviors can be found in the
  -link:../admin_guide/syncing_groups_with_ldap.html#deref-aliases[table below].
  +dereferencing behaviors can be found in the link:#deref-aliases[table below].
   <4> The time limit allowed for the search by the client, in seconds. A value of
   0 imposes no client-side limit.
   <5> A valid LDAP search filter. If this is left undefined, then the default is
  
positive.code: <3> The IP address and host of the LDAP server where this group's record is
  stored.
  <4> The name of the group as listed in the LDAP server.
  <5> The users that are members of the group, named as specified by the
  sync file.
  ====
  
  === Augmented Active Directory
  In the augmented Active Directory schema, both users (Jane and Jim) and groups
  exist in the LDAP server as first-class entries, and group membership is stored
  in attributes on the user. The following snippet of `ldif` defines the users and
  group for this schema:
  
  .LDAP Entries Using Augmented Active Directory Schema: `augmented_active_directory.ldif`
  ====
  [source,ldif]
  ----
  
negative.code: <4> The attribute on the user that stores the membership information.
  ====
  
  To run sync with the *_augmented_active_directory_config.yaml_* file:
  
  ----
  $ oadm groups sync --sync-config=augmented_active_directory_config.yaml --confirm
  ----
  
  OpenShift creates the following group record as a result of the above sync
  operation:
  
  .OpenShift Group Created Using *_augmented_active_directory_config.yaml_*
  ====
  [source,yaml]
  ----
  