LOGIN:
  driver           = plaintext
  server_prompts   = Username:: : Password::
  server_set_id              = ${lookup ldapdn{user=LDAP_BINDDN \
                                        pass=LDAP_PASS \
                                        ldap:///LDAP_BASEDN??sub?(&(objectClass=person)(sAMAccountName=${quote_ldap_dn:$auth1}))} \
                                        {$value}fail \
                                        }
  server_condition = ${if ldapauth{user="${lookup ldapdn{user=LDAP_BINDDN \
                                        pass=LDAP_PASS \
                                        ldap:///LDAP_BASEDN??sub?(&(objectClass=person)(sAMAccountName=${quote_ldap_dn:$auth1}))} \
                                        {$value}fail}" \
                               pass=${quote:$auth2} \
                               ldap:///} \
                               {true}{false}}
  server_advertise_condition = ${if def:tls_cipher }