#--------------------------------
# Enable ldap auth method
#--------------------------------
resource "vault_ldap_auth_backend" "ldap" {
  path        = "ldap"
  url         = "ldap://ldap.query.consul"
  userdn      = "dc=main,dc=unkin,dc=net"
  userattr    = "uid"
  upndomain   = "main.unkin.net"
  discoverdn  = false
  groupdn     = "ou=groups,dc=main,dc=unkin,dc=net"
  groupfilter = "(memberOf=ou=vault_access,ou=groups,dc=main,dc=unkin,dc=net)"
}