LDAP user source portion

// Authentication using LDAP
SOGoUserSources = (
    {
        // Used for user authentication
        type = ldap;
        id = users;
        canAuthenticate = YES;
        isAddressBook = NO;
        displayName = "LDAP Authentication";

        hostname = "ldap://my.domain:389";   // <- Set to ldaps://ad.example.com:636 for LDAPS.
        baseDN = "dc=my,dc=domain";
        bindDN = "CN=ldapadmin,OU=Service Accounts,OU=Groups,dc=my,dc=domain";
        bindPassword = "secret";
        filter = "objectClass=person AND userPrincipalName='*' AND (NOT userAccountControl:1.2.840.113556.1.4.803:=2)";
        scope = SUB;

        // always keep binding to the LDAP server using the DN of the
        // currently authenticated user. bindDN and bindPassword are still
        // required to find DN of the user.
        // Note: with default LDAP acl configured by iRedMail, user doesn't
        //       have privilege to query o=domains,dc=delmsgs,dc=freeddns,dc=org.
        //       so this doesn't work.
        bindAsCurrentUser = YES;

        // The algorithm used for password encryption when changing
        // passwords without Password Policies enabled.
        // Possible values are: plain, crypt, md5-crypt, ssha, ssha512.
        userPasswordAlgorithm = ssha512;

        CNFieldName = cn;
        IDFieldName = userPrincipalName;
        // value of UIDFieldName must be unique on entire server
        UIDFieldName = userPrincipalName;
        IMAPLoginFieldName = userPrincipalName;
        MailFieldNames = (userPrincipalName);
        bindFields = (userPrincipalName);
    },
    {
        // Used for global address book
        type = ldap;
        id = global_addressbook;
        canAuthenticate = NO;
        isAddressBook = YES;
        displayName = "Global Address Book";
        bindAsCurrentUser = YES;

        // Listing of this LDAP source is only possible when performing a
        // search (respecting the SOGoSearchMinimumWordLength parameter)
        // or when explicitely typing a single dot.
        // Defaults to YES when unset.
        //
        // WARNING: if you have many accounts in this address book, it may
        //          reach server-side query size limit, or cause
        //          performance issue.
        listRequiresDot = NO;

       // Set to ldaps://ad.example.com:636 for LDAPS.
        hostname = "ldap://my.domain:389";
        baseDN = "dc=my,dc=domain";
        bindDN = "CN=ldapadmin,OU=Service Accounts,OU=Groups,dc=my,dc=domain";
        bindPassword = "secret";
        filter = "(objectClass=person OR (objectClass=group AND mail='*')) AND (NOT userAccountControl:1.2.840.113556.1.4.803:=2)";
        scope = SUB;

        IDFieldName = userPrincipalName;
        bindFields = (userPrincipalName);
        // value of UID field must be unique on whole server.
        UIDFieldName = userPrincipalName;
        IMAPLoginFieldName = userPrincipalName;

        CNFieldName = cn;
        SearchFieldNames = (mail, cn, sAMAccountName, displayName, sn, givenName);

        mapping = {
          ou = ("department", "ou");
          street = ("streetAddress", "street");
          mozillaworkurl = ("wWWHomePage", "mozillaworkurl");
          description = ("info", "description");
        };
    },
    {
        // Used for distribution lists
        type = ldap;
        id = distribution_lists;
        canAuthenticate = NO;
        isAddressBook = NO;
        displayName = "Distribution Lists";
        bindAsCurrentUser = YES;
        // Set to ldaps://ad.example.com:636 for LDAPS.
        hostname = "ldap://my.domain:389";
        baseDN = "dc=my,dc=domain";
        bindDN = "CN=ldapadmin,OU=Service Accounts,OU=Groups,dc=my,dc=domain";
        bindPassword = "secret";
        filter = "(objectClass=group) AND (mail=*)";
        scope = SUB;

        IDFieldName = cn;
        bindFields = (cn);
        // value of UID field must be unique on whole server.
        UIDFieldName = cn;
        IMAPLoginFieldName = mail;
        CNFieldName = cn;
        SearchFieldNames = (mail, cn, displayName);
        mapping = {
          description = ("description");
        };
    },
    {
        // Used for resource accounts
        type = ldap;
        id = resources;
        canAuthenticate = NO;
        isAddressBook = NO;
        displayName = "Resources";
        bindAsCurrentUser = YES;

        hostname = "ldap://my.domain:389";
        baseDN = "OU=Exchange Resources,OU=Service Accounts,OU=Groups,dc=my,dc=domain";
        bindDN = "CN=ldapadmin,OU=Service Accounts,OU=Groups,dc=my,dc=domain";
        bindPassword = "secret";
        filter = "(employeeType=Resource)";
        // scope = SUB;

        IDFieldName = cn;
        bindFields = (cn);
        UIDFieldName = cn;
        IMAPLoginFieldName = mail;

        CNFieldName = cn;
        SearchFieldNames = (mail, cn, displayName);
        // MultipleBookingsFieldName = customMultipleBookings;
        KindFieldName = physicalDeliveryOfficeName;
        mapping = {
          description = ("description");
        };
    }
);