config user ldap

    edit "AD_Server"                          # LDAP server profile name

        set server "10.1.1.10"                # IP address of LDAP/AD server

        set cnid "sAMAccountName"             # Common Name identifier (used for login)

        set dn "dc=corp,dc=abc,dc=com"        # Base DN (Distinguished Name)

        set type regular                      # LDAP type: regular (AD) or simple

        set username "ldapbind@corp.abc.com"  # Bind account for LDAP query

        set password ENC a1b2c3d4e5           # Encrypted bind password

        set group-member-check group-object   # Check group membership

        set secure enable                     # Enable LDAPS (SSL/TLS)

        set port 636                          # Port for LDAPS

    next

end

config user group

    edit "AD_Users"                           # User group name

        set member "AD_Server"                # Associated LDAP server

        set authtimeout 480                   # Authentication timeout (seconds)

    next

end