host              dc.nwtraders.msft
base              dc=nwtraders,dc=msft
ldap_version 3

use_sasl on
sasl start_tls
scope sub

nss_base_passwd   ou=user,dc=nwtraders,dc=msft?sub
nss_base_shadow   ou=user,dc=nwtraders,dc=msft?sub
nss_base_group    ou=group,dc=nwtraders,dc=msft?one

# Services for UNIX 3.5 mappings
nss_map_objectclass posixAccount User
nss_map_objectclass shadowAccount User
nss_map_attribute uid msSFU30Name
nss_map_attribute uniqueMember msSFU30PosixMember
nss_map_attribute homeDirectory msSFU30HomeDirectory
nss_map_attribute homeDirectory msSFUHomeDirectory
nss_map_objectclass posixGroup Group
pam_login_attribute msSFU30Name
pam_filter objectclass=User

sasl_secprops maxssf=0
krb5_ccname FILE:/etc/.ldapcache