}
		// Save each attribute to claims.
		claims[ldapAttribPrefix+attribKey] = attribValue[0]
	}

	if key != nil {
		// If a key was provided, we expect the user to have an sshPublicKey
		// attribute.
		if _, ok := claims[ldapAttribPrefix+"sshPublicKey"]; !ok {
			return nil, errAuthentication
		}
	}

	expiryDur, err := globalIAMSys.LDAPConfig.GetExpiryDuration("")
	if err != nil {
		return nil, err
	}

MINIO_IDENTITY_LDAP_USER_DN_SEARCH_FILTER   (string)    Search filter to lookup user DN
MINIO_IDENTITY_LDAP_USER_DN_ATTRIBUTES      (list)      "," separated list of user DN attributes e.g. "uid,cn,mail,sshPublicKey"
MINIO_IDENTITY_LDAP_GROUP_SEARCH_FILTER     (string)    search filter for groups e.g. "(&(objectclass=groupOfNames)(memberUid=%s))"