DCS Ldap configuration

    <key>DirectoryService</key>
    <dict>
      <key>type</key>
      <string>twistedcaldav.directory.ldapdirectory.LdapDirectoryService</string>

      <key>params</key>
      <dict>
        <key>recordTypes</key>
        <array>
           <string>users</string>
           <string>groups</string>
           <string>locations</string>
           <string>resources</string>
        </array>
        <key>restrictEnabledRecords</key>
        <false/>
        <key>restrictToGroup</key>
        <string>odtestgrouptop</string>
        <key>cacheTimeout</key>
        <integer>30</integer>
        <key>uri</key>
<!-- our LDAP server URL -->
        <key>tls</key>
        <false/>
        <key>tlsCACertFile</key>
        <string></string>
        <key>tlsCACertDir</key>
        <string></string>
        <key>tlsRequireCert</key>
        <string>never</string>
        <key>credentials</key>
        <dict>
          <key>dn</key>
<!-- our LDAP server BIND_DN -->
          <key>password</key>
<!-- also the password. It does connect properly -->
        </dict>
        <key>authMethod</key>
        <string>LDAP</string>
        <key>rdnSchema</key>
        <dict>
          <key>base</key>
          <string>dc=example,dc=base,dc=path</string> <!-- replaced with a fake one, but it works for users so I am confident I have the correct base -->
          <key>guidAttr</key>
          <string>entryUUID</string> <!-- LDAP attribute used for GUIDs. entryUUID -->
          <key>users</key>
          <dict>
            <key>rdn</key>
            <string>cn=users</string> <!-- users path relative to the base dn -->
            <key>attr</key>
            <string>uid</string>
            <key>emailSuffix</key>
            <string></string>
            <key>filter</key>
            <string></string>
            <key>loginEnabledAttr</key>
            <string></string>
            <key>loginEnabledValue</key>
            <string>yes</string>
            <key>mapping</key>
            <dict>
              <key>recordName</key>
              <string>uid</string>
              <key>fullName</key>
              <string>cn</string>
              <key>emailAddresses</key>
              <string>mail</string>
              <key>firstName</key>
              <string>givenName</string>
              <key>lastName</key>
              <string>sn</string>
            </dict>
          </dict>
          <key>groups</key>
          <dict>
            <key>rdn</key>
            <string>groupCategory=instruments</string>
            <key>attr</key>
            <string>memberUid</string>
            <key>emailSuffix</key>
            <string></string>
            <key>filter</key>
            <string></string>
            <key>mapping</key>
            <dict>
              <key>recordName</key>
              <string>uid</string>
              <key>fullName</key>
              <string>cn</string>
              <key>emailAddresses</key>
              <string>mail</string>
              <key>firstName</key>
              <string>givenName</string>
              <key>lastName</key>
              <string>sn</string>
            </dict>
          </dict>

          <key>resources</key>
          <dict>
            <key>rdn</key>
            <string>groupCategory=instruments</string>
            <!-- <string>ou=resources</string> --> <!-- dn for resources (relative to base dn) -->
            <key>mapping</key>
            <dict>
              <key>recordName</key>
              <string>cn</string>
              <key>fullName</key>
              <string>cn</string>
              <key>emailAddresses</key>
              <array>
              </array>
              <key>firstName</key>
              <string></string>
              <key>lastName</key>
              <string></string>
            </dict>
          </dict>
        </dict>
        <key>groupSchema</key>
<!-- I think this part is not configured correctly -->
        <dict>
          <key>membersAttr</key>
          <string>uniqueMember</string>
          <key>nestedGroupsAttr</key>
          <string></string>
          <key>memberIdAttr</key>
          <string>memberUid</string>
        </dict>
        <key>resourceSchema</key>
        <dict>
          <key>resourceInfoAttr</key>
          <string>apple-resource-info</string>
          <key>autoScheduleAttr</key>
          <string></string>
          <key>autoScheduleEnabledValue</key>
          <string>yes</string>
          <key>proxyAttr</key>
          <string></string>
          <key>readOnlyProxyAttr</key>
          <string></string>
        </dict>
      </dict>
    </dict>