vault ldap configuration

ldap.tf

resource "vault_ldap_auth_backend" "default" {
    path        = "ldap"
    url         = "ldaps://dc-01.example.org"
    userdn      = "OU=Users,OU=Accounts,DC=example,DC=org"
    userattr    = "sAMAccountName"
    upndomain   = "EXAMPLE.ORG"
    discoverdn  = false
    groupdn     = "OU=Groups,DC=example,DC=org"
    groupfilter = "(&(objectClass=group)(member:1.2.840.113556.1.4.1941:={{.UserDN}}))"
}

resource "vault_identity_group" "default" {
  name     = "vault_admin"
  type     = "external"
  policies = ["vault-admin"]
}

resource "vault_identity_group_alias" "default" {
  name           = "vault_admin"
  mount_accessor = vault_ldap_auth_backend.default.accessor
  canonical_id   = vault_identity_group.default.id
}