##############################################################
#  ACTIVE DIRECTORY USER PLUGIN SETTINGS
#

# The server to connect with. When using SSL, make sure this is
# the fqdn of the server as specified in the CN attribute of
# the server certificate
ldap_host = 

# Use 636 for ldaps
ldap_port = 389

# LDAP protocol
# use 'ldaps' for SSL encryption. Make sure /etc/ldap/ldap.conf is
# configured correctly with TLS_CACERT
ldap_protocol = ldap

# The DN of the user to bind as for normal operations 
ldap_bind_user = cn=Administrator,cn=users,dc=zarafa,dc=com

# LDAP bind password for ldap_bind_user
ldap_bind_passwd = 

# The timeout for network operations in seconds
ldap_network_timeout = 30

# Search for users starting from this DN
ldap_user_search_base = cn=Users,dc=zarafa,dc=com

# Search method to find a user, can be: base, one or sub
ldap_user_scope = sub

# Search for users using this LDAP filter.  See ldap_search(3) or RFC
# 2254 for details on the filter syntax.
ldap_user_search_filter = (&(objectClass=user)(objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=zarafa,DC=com))

# unique user id for find the user
# WARNING: the default changed in 6.30 from objectSid to objectGuid!
# If you're upgrading from an older version to 6.30 or later,
# make sure this option is set to 'objectSid'. Otherwise all stores will be deleted and recreated!
ldap_user_unique_attribute = objectGuid

# Type of unique user id
ldap_user_unique_attribute_type = binary

# Search for groups starting from this DN
ldap_group_search_base = cn=Users,dc=zarafa,dc=com

# Search method to find a group, can be: base, one or sub
ldap_group_scope = sub

# Search for groups using this LDAP filter.
ldap_group_search_filter = (objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=zarafa,DC=com)

# unique group id for find the group
ldap_group_unique_attribute = objectSid

# Type of unique group id
ldap_group_unique_attribute_type = binary

# Search for companies starting from this DN
ldap_company_search_base = dc=zarafa,dc=com

# Search method to find a company, can be: base, one or sub
ldap_company_scope = sub

#Search for companies using this LDAP filter.
ldap_company_search_filter = (&(objectClass=zarafaCompany)(objectCategory=CN=Company,CN=Schema,CN=Configuration,DC=zarafa,DC=com))

# unique company id for finding the company
ldap_company_unique_attribute = objectSid

# Type of the unique company id
ldap_company_unique_attribute_type = binary

##################################################################
#
# The Following settings should be fine for all ADS installations
#
##################################################################

ldap_fullname_attribute = cn
ldap_loginname_attribute = sAMAccountName
ldap_password_attribute =
ldap_emailaddress_attribute = mail
ldap_user_certificate_attribute = userCertificate
ldap_authentication_method = bind
ldap_groupname_attribute = cn
ldap_groupmembers_attribute = member
ldap_groupmembers_attribute_type = dn
ldap_groupmembers_relation_attribute =
ldap_companyname_attribute = cn
ldap_server_charset = utf-8
ldap_last_modification_attribute = uSNChanged

##################################################################
#
# The following settings can only be used when the Zarafa
# Active Directory plugin is installed on the Active Directory
# server. If you don't have the plugin, you needn't remove
# the configuration directives
#
##################################################################

ldap_isadmin_attribute = zarafaAdmin
ldap_nonactive_attribute = 
ldap_quotaoverride_attribute = zarafaQuotaOverride
ldap_warnquota_attribute = zarafaQuotaWarn
ldap_softquota_attribute = zarafaQuotaSoft
ldap_hardquota_attribute = zarafaQuotaHard
ldap_userdefault_quotaoverride_attribute = zarafaUserDefaultQuotaOverride
ldap_userdefault_warnquota_attribute = zarafaUserDefaultQuotaWarn
ldap_userdefault_softquota_attribute = zarafaUserDefaultQuotaSoft
ldap_userdefault_hardquota_attribute = zarafaUserDefaultQuotaHard
ldap_company_view_attribute = zarafaViewPrivilege
ldap_company_view_attribute_type = text
ldap_company_view_relation_attribute =
ldap_company_admin_attribute = zarafaAdminPrivilege
ldap_company_admin_attribute_type = text
ldap_company_admin_relation_attribute =
ldap_company_system_admin_attribute = zarafaSystemAdmin
ldap_company_system_admin_attribute_type = text
ldap_company_system_admin_relation_attribute =
ldap_quota_userwarning_recipients_attribute = zarafaQuotaUserWarningRecipients
ldap_quota_userwarning_recipients_attribute_type = text
ldap_quota_userwarning_recipients_relation_attribute =
ldap_quota_companywarning_recipients_attribute = zarafaQuotaCompanyWarningRecipients
ldap_quota_companywarning_recipients_attribute_type = text
ldap_quota_companywarning_recipients_relation_attribute=
ldap_quota_multiplier = 1048576
ldap_user_department_attribute = department
ldap_user_fax_attribute = facsimileTelephoneNumber
ldap_user_location_attribute = physicalDeliveryOfficeName
ldap_user_telephone_attribute = telephoneNumber
ldap_user_sendas_attribute = zarafaSendAsPrivilege
ldap_user_sendas_attribute_type = text
ldap_user_sendas_relation_attribute = distinguishedName

# LDAP object search filter. %s in this filter will be replaced with
# the object being searched.
# Default: empty
# ADS recommended: (anr=%s)
# OpenLDAP optional: (|(mail=%s*)(uid=%s*)(cn=*%s*)(fullname=*%s*)(givenname=*%s*)(lastname=*%s*)(sn=*%s*))
ldap_object_search_filter = (anr=%s)

# LDAP search filter limiter. Limits number of objects that are attempted in a single LDAP filter
# Default: 1000
ldap_filter_cutoff_elements = 1000

ldap_addresslist_search_base = cn=addresslists,dc=zarafa,dc=com
ldap_addresslist_scope = sub
ldap_addresslist_search_filter = (objectClass=zarafaAddressList)
ldap_addresslist_unique_attribute = cn
ldap_addresslist_unique_attribute_type = text
ldap_addresslist_filter_attribute = zarafaFilter
ldap_addresslist_name_attribute = cn
