Gerrit ActiveDirectory LDAP_BIND authentication example

gerrit.conf

# To log in, use "[email protected]" and NT password in the Gerrit login form. To confirm the pattern for your directory, test with:
#   ldapsearch -h adldap -s sub -s sub -b 'dc=example,dc=com' "(&(objectClass=person)([email protected]))"

[auth]
        type = LDAP_BIND
[ldap]
        server = ldap://adldap
        accountBase = DC=example,DC=com
        accountPattern = (&(objectClass=person)(userPrincipalName=${username}))
        #accountPattern = (&(objectClass=person)(sAMAccountName=${username}))
        accountScope = sub
        groupBase = DC=example,DC=com
        accountFullName = displayName
        accountMemberField = memberOf
        accountEmailAddress = mail
        accountSshUserName = ${sAMAccountName.toLowerCase}
        referral = follow