title: How to find the account_suffix for LDAP
body: <p>I am trying to setup the bhLDAPAuthPlugin to authenticate through Active Directory. I am having trouble configuring the settings for authentication.</p>
  
  <p>In the adLDAP.php file here are the default settings:</p>
  
  <pre><code>class adLDAP {
      // BEFORE YOU ASK A QUESTION, PLEASE READ THE DOCUMENTATION AND THE FAQ
      // http://adldap.sourceforge.net/documentation.php
      // http://adldap.sourceforge.net/faq.php
  
      // You can set your default variables here, or when you invoke the class
      var $_account_suffix="@mydomain.local";
      var $_base_dn = "DC=mydomain,DC=local"; 
  
      // An array of domain controllers. Specify multiple controllers if you 
      // would like the class to balance the LDAP queries amongst multiple servers
      var $_domain_controllers = array ("dc01.mydomain.local");
  
      // optional account with higher privileges for searching
      // not really that optional because you can't query much as a user
      var $_ad_username=NULL;
      var $_ad_password=NULL;
  
      // AD does not return the primary group. http://support.microsoft.com/?kbid=321360
      // This tweak will resolve the real primary group, but may be resource intensive. 
      // Setting to false will fudge "Domain Users" and is much faster. Keep in mind though that if
      // someone's primary group is NOT domain users, this is obviously going to bollocks the results
      var $_real_primarygroup=true;
  
      // Use SSL, your server needs to be setup, please see - http://adldap.sourceforge.net/ldap_ssl.php
      var $_use_ssl=false;
  
      // When querying group memberships, do it recursively
      // eg. User Fred is a member of Group A, which is a member of Group B, which is a member of Group C
      // user_ingroup("Fred","C") will returns true with this option turned on, false if turned off
      var $_recursive_groups=false;
  
      // You should not need to edit anything below this line
      //******************************************************************************************
  </code></pre>
  
  <p>This question may seem abstract, but how do I determine this info? </p>
  
  <p>In the documentation for the plugin, it says the account_suffix should be the domain I am connecting to, but I have found other documentation that lists out the specific parameters like organization such as:</p>
  
  <pre><code>account_suffix = "ou=People, o=domain.edu";
  </code></pre>
  
  <p>How do I find which to use?</p>