PLAIN:
  driver                     = plaintext
  server_prompts             = :
  server_set_id              = ${lookup ldapdn{user=LDAP_BINDDN \
                                        pass=LDAP_PASS \
                                        ldap:///LDAP_BASEDN??sub?(&(objectClass=person)(sAMAccountName=${quote_ldap_dn:$auth2}))} \
                                        {$value}fail \
                                        }
  server_condition = ${if ldapauth{user="${lookup ldapdn{user=LDAP_BINDDN \
                                        pass=LDAP_PASS \
                                        ldap:///LDAP_BASEDN??sub?(&(objectClass=person)(sAMAccountName=${quote_ldap_dn:$auth2}))} \
                                        {$value}fail}" \
                               pass=${quote:$auth3} \
                               ldap:///} \
                               {true}{false}}