Authentication Plugins SET_VAR  Hint Applies No Type Boolean Default Value OFF Command-Line Format --authentication-ldap-simple-server- host=host_name System Variable authentication_ldap_simple_server_host Scope Global Dynamic Yes SET_VAR  Hint Applies No Type String For simple LDAP authentication, whether to enable LDAP search referral. See LDAP Search Referral. • authentication_ldap_simple_server_host For simple LDAP authentication, the LDAP server host. The permitted values for this variable depend on the authentication method: •For  authentication_ldap_simple_auth_method_name=SIMPLE : The LDAP server host can be a host name or IP address. •For  authentication_ldap_simple_auth_method_name=AD-FOREST . The LDAP server host can be an Active Directory domain name. For example, for an LDAP server URL of  ldap:// example.mem.local:389 , the domain name can be  mem.local . •The name server that provides information about Active Directory domains has IP address 10.172.166.100 . •The LDAP servers have names  ldap1.mem.local  through  ldap3.mem.local  and IP addresses 10.172.166.101  through  10.172.166.103 . 1. Add a line to  /etc/resolv.conf  to specify the name server that provides information about Active Directory domains: 2. Configure the appropriate zone file for the name server with SRV records for the LDAP servers: 1376 _ldap._tcp.mem.local. 86400 IN SRV 0 100 389 ldap1.mem.local. nameserver 10.172.166.100 host -t SRV _ldap._tcp.mem.local You want the LDAP servers to be discoverable using SRV searches. For example, at the command line, a command like this should list the LDAP servers: Perform the DNS configuration as follows: An Active Directory forest setup can have multiple domains (LDAP server IPs), which can be discovered using DNS. On Unix and Unix-like systems, some additional setup may be required to configure your DNS server with SRV records that specify the LDAP servers for the Active Directory domain. For information about DNS SRV, see RFC 2782. Suppose that your configuration has these properties: