{if isset($loginsource_include_aftergroups)} {include file=$loginsource_include_aftergroups} {/if}
{"Name"|alang}
{"Enabled"|alang}
{"Groups"|alang}
{"Host"|alang}
{"Port"|alang}
{"User"|alang}
{"Password"|alang}
{"Database"|alang}
{"Table prefix"|alang}
{"Base DN"|alang} {"The base of the distinguished name that users would log in with; e.g., ou=Users,dc=domain,dc=com"|help}
{"Administrator DN"|alang} {"The full distinguished name of an administrator account, necessary for Active Directory's login process. Example: cn=Administrator,ou=Users,dc=domain,dc=com"|help}
{"Administrator Password"|alang} {"The password for the administrator account, mentioned above."|help}
{"Base DN"|alang} {"The base of the distinguished name that users would log in with; e.g., ou=Users,dc=domain,dc=com"|help}
{"Use base DN when logging in"|alang} {"With this checked, we will log in with a fully-formed distinguished name (cn=user,ou=Users,dc=domain,dc=com); without it, we'll log in with 'user' and let the server sort things out."|help}
{"Login attribute"|alang} {"The attribute that the LDAP server expects us to log in with. In the vast majority of cases, this field should be 'cn' (short for 'common name')."|help}
{"Bind DN"|alang} {"In some cases, particularly with Active Directory, we must log in with an administrative account before we can truly log in with a user. In that case, you would place here the full distinguished name of the LDAP server's administrative user (e.g. cn=Administrator,ou=Users,dc=domain,dc=com)."|help}
{"Bind Password"|alang} {"The password of the administrative user mentioned above."|help}
{"User attribute"|alang} {"In some cases, particularly Active Directory, the user name you normally log in with is not actually what the server expects through its normal LDAP interface. This field is the name of the attribute that you want to use to log in with. In most of those cases, the value which must go here would be 'samAccountName'."|help}
{"Filter"|alang} {"If specified, this LDAP filter will be used when searching for the user object in the LDAP server, and 'User attribute' field will be ignored. In filter you can use %USERNAME% tag, which will be replaced with the username of the user logging in."|help}