name MyApp

# Config for Store::LDAP
<authentication>
  default_realm ldap
  <realms>
    <ldap>
      <credential>
        class Password
        password_field password
        password_type  self_check
      </credential>
      <store>
        class LDAP
        ldap_server ldap://sub.ad.mydomain.org
        <ldap_server_options>
          timeout 30
          onerror warn
        </ldap_server_options>
        binddn myusername@ad.mydomain.org
        bindpw mypassword
        start_tls 0
        <start_tls_options>
          verify none
        </start_tls_options>
        user_basedn DC=sub,DC=ad,DC=mydomain,DC=org
        user_filter (sAMAccountName=%s)
        user_scope one
        user_field sAMAccountName  # also tried samaccountname
        <user_search_options>
          deref always
        </user_search_options>
        use_roles 0
      </store>
    </ldap>
  </realms>
</authentication>