galaxy project ldap authentication

auth_conf.xml

<?xml version="1.0"?>
<auth>


<authenticator>
        <type>ldap</type>

        <!-- Filter users for which this authenticator applies. This is a Python
             expression which is evaluated after replacing instances of {email}
             and {username} with the corresponding user's values. -->
   <!-- <filter>'{email}'.endswith('@domain.com')</filter> 
    <filter>'{uid}'</filter> -->
        <options>
            <auto-register>True</auto-register>
            <server>ldap://ldap.server.com</server>

	    <!-- If search-fields is not present, all other search-* elements are ignored -->
	    <!-- dn is something like ou=user1,ou=People,dc=domain,dc=com -->
        <search-fields>uid,mail,dn</search-fields>
            <search-filter>(&#124;(mail={email})(uid={username}))</search-filter> 
            <search-base>ou=People,dc=domain,dc=com</search-base>

            <!-- If search-user not specified will bind anonymously to LDAP for search -->
        <search-user>cn=ldap-read-user,ou=People,ou=domain,dc=com</search-user>
            <search-password>ldad-read-user-password</search-password>
            <bind-user>{dn}</bind-user>
            <bind-password>{password}</bind-password>
            <auto-register-username>{uid}</auto-register-username> 
            <auto-register-email>{mail}</auto-register-email>

            <!-- To allow login with username instead of email, default is False -->
        <login-use-username>True</login-use-username>
        </options>
     </authenticator>

    <authenticator>
        <type>localdb</type>
        <options>
            <allow-password-change>true</allow-password-change>
        </options>
    </authenticator>
</auth>