We recommend that you have a special LDAP system user for this. If your LDAP server does not support the member-of-overlay in LDAP filters, the input field is The %uid placeholder is replaced with the login name entered by the user upon login. .. Few configuration settings can only be set on command line via occ ..