etc/examples/login_ldap.conf

*5ce92256Smartijnhost=ldap+tls://1.2.3.4:8389
*5ce92256Smartijnhost=ldap://localhost
*5ce92256Smartijncacert=/etc/ssl/ca-ldap.pem
*5ce92256Smartijnscope=sub
*5ce92256Smartijnbasedn=dc=openbsd,dc=org
*5ce92256Smartijnbinddn=cn=admin,dc=openbsd,dc=org:\
*5ce92256Smartijnbindpw=password
*5ce92256Smartijnfilter=(&(objectClass=user)(sAMAccountName=%u))