bindurls ldap://127.0.0.1 ldaps://172.16.17.1 binddn cn=admin,dc=example,dc=com # comment bindpass strong-password bindtimeout 5 # another comment and empty string below debug 5 # ^^ this is actually boolean flag: zero and non-zero basedn ou=users,dc=example,dc=com userfilter (objectClass=inetOrgPerson)