ldapclient manual -v \
-a serviceAuthenticationMethod=pam_ldap:simple \
-a defaultsearchbase=dc=xx,dc=cuhk,dc=edu,dc=hk \
-a domainname=ie.cuhk.edu.hk \
-a defaultServerList=xx.xx.xx.xx \
#-a credentialLevel=proxy \
#-a proxyDN=cn=proxyuser,dc=xx,dc=cuhk,dc=edu,dc=hk \
#-a proxyPassword=xxxxxx \
-a followReferrals=false \
-a attributeMap=group:userpassword=userPassword \
-a attributeMap=group:memberuid=memberUid \
-a attributeMap=group:gidnumber=gidNumber \
-a attributeMap=passwd:gecos=cn \
-a attributeMap=passwd:gidnumber=gidNumber \
-a attributeMap=passwd:uidnumber=uidNumber \
-a attributeMap=passwd:homedirectory=homeDirectory \
-a attributeMap=passwd:loginshell=loginShell \
-a attributeMap=shadow:shadowflag=shadowFlag \
-a attributeMap=shadow:userpassword=userPassword \
-a objectClassMap=group:posixGroup=posixGroup \
-a objectClassMap=passwd:posixAccount=posixAccount \
-a objectClassMap=shadow:shadowAccount=shadowAccount \
-a serviceSearchDescriptor=passwd:ou=People,dc=xx,dc=cuhk,dc=edu,dc=hk?sub \
-a serviceSearchDescriptor=shadow:ou=People,dc=xx,dc=cuhk,dc=edu,dc=hk?sub \
-a serviceSearchDescriptor=group:dc=xx,dc=cuhk,dc=edu,dc=hk?sub