`accountattr`: `<string>` ('default =' `sAMAccountName, uid`)::

Account attribute name name.

`basedn`: `<string>` ::

Base domain name.

`binddn`: `<string>` ::

Bind domain name.

`bindpw`: `<string>` ::

Bind password.

`cafile`: `<string>` ::

Path to CA file. Only useful with option 'verify'

`comment`: `<string>` ::

Description.

`disable`: `<boolean>` ::

Flag to disable/deactivate the entry.

`filter`: `<string>` ::

LDAP filter.

`groupbasedn`: `<string>` ::

Base domain name for groups.

`groupclass`: `<string>` ('default =' `group, univentionGroup, ipausergroup`)::

List of objectclasses for groups.

`mailattr`: `<string>` ('default =' `mail, userPrincipalName, proxyAddresses, othermailbox, mailAlternativeAddress`)::

List of mail attribute names.

`mode`: `<ldap | ldap+starttls | ldaps>` ('default =' `ldap`)::

LDAP protocol mode ('ldap', 'ldaps' or 'ldap+starttls').

`port`: `<integer> (1 - 65535)` ::

Specify the port to connect to.

`profile`: `<string>` ::

Profile ID.

`server1`: `<string>` ::

Server address.

`server2`: `<string>` ::

Fallback server address. Userd when the first server is not available.

`verify`: `<boolean>` ('default =' `0`)::

Verify server certificate. Only useful with ldaps or ldap+starttls.