[dc0.example.com] # bind DN towards this AD if client doesn't specify one binddn=CN=blabla,OU=Foo,DC=public,DC=ads,DC=example,DC=com # matching password... bindpw=geheim # search base to use (in case multiple ADs are configured this is used to identify which one the client actually wants to talk to) base=DC=public,DC=ads,DC=example,DC=com # optional: template for home directory mount point to pass to client. use %s as the users account name. only used if AD doesn't supply the homeDirectory attribute (or it doesn't contain a UNC path) home=\\windows-server\users\%s # For using SSL between client and proxy, uncomment these. For plaintext, remove or comment out cert=/my/cert.pem privkey=/my/privatekey.pem