LDAP for 389 Directory Server

Here is an example config for 389 Directory Server (formerly Fedora Directory Server). You should create a staff group and modify that setting to include the relevent users.

# LDAP Settings
requirecert = False
starttls = True
uri = ldap://ldap.example.com:389
userbase = ou=people,dc=example,dc=com
userfilter = (uid=%(user)s)
groupbase = ou=groups,dc=example,dc=com
groupfilter = (objectClass=groupOfUniqueNames)
grouptype = GroupOfUniqueNamesType
staff = cn=Staff,ou=groups,dc=example,dc=com