Как пример файла auth-ldap.xml для сказанного Евгением Гладких:
<?xml version="1.0"?>
<!-- LDAP authorization module configuration -->
<drwcsd-ldap-auth>
<enabled value="yes"/>
<order value="10"/>
<server url="ldap://your_Domain_Controller_name"/>
<user-dn-expr user="yourname@yourdomain" base="CN=Your Name,OU=YourOU,DC=optional_yoursubdomain,DC=yourdomain,DC=ru"/>
<user-dn-expr user="yourname1@yourdomain" base="CN=Your Name 1,OU=YourOU,DC=optional_yoursubdomain,DC=yourdomain,DC=ru"/>
<user-dn-expr user="yourname2@yourdomain" base="CN=Your Name 2,OU=YourOU,DC=optional_yoursubdomain,DC=yourdomain,DC=ru"/>
<user-dn-expr user="(.*)@yourdomain" base="CN=\1,OU=YourOU,DC=optional_yoursubdomain,DC=yourdomain,DC=ru"/>
<user-dn-extension-enabled value="no"/>
<group-reference-attribute-name value="memberOf"/>
<admin-attribute-name value="primaryGroupID" true-value="^.+$" false-value="^FALSE$"/>
<readonly-admin-attribute-name value="DrWebAdminReadOnly" true-value="^TRUE$" false-value="^FALSE$"/>
<grouponly-admin-attribute-name value="DrWebAdminGroupOnly" true-value="^TRUE$" false-value="^FALSE$"/>
<groups-admin-attribute-name value="DrWebAdminGroup"/>
</drwcsd-ldap-auth>