title: Gerrit 2.11.4 LDAP configuration of accountBase and groupBase fields causing log-in failures
body: <p>Can someone point me to documentation and/or describe what the LDAP configuration options mean for gerrit's configuration?</p>
  
  <p>Ex:  ou= and dc= etc.</p>
  
  <p>I found these details on google's site about ldap configuration for accountBase and groupBase however it too lacks details about what the options/parameters are and what their values should be based on.</p>
  
  <pre><code>https://gerrit-review.googlesource.com/Documentation/config-gerrit.html#ldap
  </code></pre>
  
  <p>Luckily I blindly copied a co-worker's gerrit server configuration, he's using version 2.1.x.  Initially I thought his options were different due to version differences, but then I tried adding his extra fields and my unique ldap account worked with the additional 'ou=' and additional 'dc=' parameters.  Error, bad-config and good-config below.</p>
  
  <p>Note:  Our company has a single ldap server, but my co-worker's gerrit has a separate ldap log-in than mine.  I didn't copy his log-in to get mine working, it was simply the accountBase and groupBase options that made the difference.</p>
  
  <p>Error:</p>
  
  <pre><code>cat log/error_log | tail -n 1
  [2015-12-16 17:21:24,144] INFO  com.google.gerrit.httpd.auth.ldap.LdapLoginServlet : 'cxxxxt\myaccount' failed to sign in: No such user: cxxxxt\myaccount
  </code></pre>
  
  <p>Bad config:</p>
  
  <pre><code>[ldap]
          server = ldap://crcxxxxt.rxxxxxxxxxxxxxs.com
          username = ldap_username_here@crcxxxxt.rxxxxxxxxxxxxxs.com
          accountBase = DC=rxxxxxxxxxxxxxs,DC=com
          groupBase = DC=rxxxxxxxxxxxxxs,DC=com
  </code></pre>
  
  <p>Good config:</p>
  
  <pre><code>[ldap]
          server = ldap://crcxxxxt.rxxxxxxxxxxxxxs.com
          username = ldap_username_here@cxxxxt.rxxxxxxxxxxxxxs.com
          accountBase = ou=Cxxxxxs,dc=cxxxxt,dc=rxxxxxxxxxxxxxs,dc=com
          groupBase = ou=Cxxxxxs,dc=cxxxxt,dc=rxxxxxxxxxxxxxs,dc=com
  </code></pre>