authorizations: &AUTHORIZATIONS
  ##allow_unauthenticated_bind: false
  ##group_base: DC=zzz,DC=yyy,DC=xxx
  #Requires config.ldap_check_group_membership in devise.rb be true
  # Can have multiple values, must match all to be authorized
  ##required_groups:
    # If only a group name is given, membership will be checked against "uniqueMember"
    ##- cn=admins,ou=groups,dc=zzz,dc=yyy,dc=xxx
    ##- cn=users,ou=groups,dc=zzz,dc=yyy,dc=xxx
    # If an array is given, the first element will be the attribute to check against, the second the group name
    ##- ["moreMembers", "cn=users,ou=groups,dc=test,dc=com"]
  ## Requires config.ldap_check_attributes in devise.rb to be true
  ## Can have multiple attributes and values, must match all to be authorized
  ##require_attribute:
    ##objectClass: inetOrgPerson
    ##authorizationRole: postsAdmin

## Environment

development:
  host: host_name
  port: 389
  attribute: mail
  base: DC=zzz,DC=yyy,DC=xxx
  admin_user: user_name
  admin_password: *******
  ssl: false

LDAP: LDAP dn lookup: mail=login
LDAP: LDAP search for login: mail=login
LDAP: LDAP search yielded 0 matches
LDAP: Authorizing user mail=login,DC=xxx,DC=zzz,DC=yyy
LDAP: Not authorized because not authenticated.