[AD]
DCs     = dc1.domain.local

###Default LDAP Port
# Non-Secure
#defPort        = 389
# Secure
defPort = 636

# LDAP Timeout
timeout = 10

# Root DN for domain
rootDN          = dc=domain,dc=local

# Base DN for search of all users
baseDN          = cn=Users,dc=domain,dc=local

# Search Filter
searchFilter    = memberOf=cn=Employees,cn=Users,dc=domain,dc=local

# Bind anonymously (0|1); if set then user/passwd are ignored
bindAnon                = 0

# Email Domain
mailDomain              = domain.com

# User may be a DN or a UPN name, e.g. user\@domain.com
user            = ldaps-user@domain.local
passwd          = a-secure-password

[OUTPUT]
outFile         = /tmp/AD-Test
[EXPIRE]
# Number of days before expiration to begin warnings
warnDays                = 50

# The e-mail address for from/reply-to
fromAddr                = "Support" <support@domain.com>

# The organization signature for the e-mail warning message
orgSig          = <<EOT
Support
support@domain.com
EOT

# A brief description of the organizational services that
# use ADS authentication
orgSvcs         = Domain's e-mail, VPN, and other internal resources

# The URL for additional help to change a password
helpURL         = http://intranet.example.com/pwdexpire.html

# If you wish to test prior to enabling for production, set a test
# e-mail recipient for all warnings (rather than end users).
# Defaults to root@localhost
testAddr                = administrator\@domain.com

# Enable test mode (0=production, 1=test)
testMode                = 1