Use LDAP servers for authencitation. The authentication is performed via the Simple Authentication and Security Layer (SASL) Framework. Groups a user belongs to are resolved by searching for groupOfNames objectClass in the LDAP directory, using the cn attribute.