if policiesDiffer {
				return []string{}, fmt.Errorf("multiple DNs map to the same LDAP DN[%s]: %v; please remove DNs that are not needed",
					normKey, origKeys)
			}

			if len(origKeys[1:]) > 0 {
				// Log that extra DN mappings will not be imported.
				iamLogEvent(ctx, "import-ldap-normalize: extraneous DN mappings found for LDAP DN[%s]: %v will not be imported", origKeys[0], origKeys[1:])
			}

        modifyList.add(mod);
    }

    /**
     * Modifies an entry.
     *
     * @param dn The DN of the entry.
     * @param modifyList The list of modification items.
     * @param envSupplier The environment supplier.
     */
    protected void modify(final String dn, final List<ModificationItem> modifyList, final Supplier<Hashtable<String, String>> envSupplier) {
        if (modifyList.isEmpty()) {

labels.ldapSecurityPrincipal=DN пользователя
labels.ldapAdminSecurityPrincipal=DN привязки
labels.ldapAdminSecurityCredentials=Пароль
labels.ldapBaseDn=Базовый DN
labels.ldap_provider_url=URL-адрес LDAP
labels.ldap_security_principal=DN пользователя
labels.ldap_admin_security_principal=DN привязки
labels.ldap_admin_security_credentials=Пароль
labels.ldap_base_dn=Базовый DN
labels.ldapAccountFilter=Фильтр учетных записей

ldap.admin.user.filter=uid\=%s
# Base DN for LDAP admin user.
ldap.admin.user.base.dn=ou\=People,dc\=fess,dc\=codelibs,dc\=org
# Object classes for LDAP admin user.
ldap.admin.user.object.classes=organizationalPerson,top,person,inetOrgPerson
# Role filter for LDAP admin.
ldap.admin.role.filter=cn\=%s
# Base DN for LDAP admin role.
ldap.admin.role.base.dn=ou\=Role,dc\=fess,dc\=codelibs,dc\=org

		for k, v := range cred.Claims {
			if k == expClaim {
				continue
			}
			opts.claims[k] = v
		}
	} else if globalIAMSys.LDAPConfig.Enabled() {
		// In case of LDAP we need to resolve the targetUser to a DN and
		// query their groups:
		opts.claims[ldapUserN] = targetUser // simple username
		var lookupResult *xldap.DNSearchResult
		lookupResult, targetGroups, err = globalIAMSys.LDAPConfig.LookupUserDN(targetUser)

		HTTPStatusCode: http.StatusNotImplemented,
	},
	ErrAdminLDAPExpectedLoginName: {
		Code:           "XMinioLDAPExpectedLoginName",
		Description:    "Expected LDAP short username but was given full DN.",
		HTTPStatusCode: http.StatusBadRequest,
	},
	ErrAdminInvalidGroupName: {
		Code:           "XMinioInvalidGroupName",
		Description:    "The group name is invalid.",
		HTTPStatusCode: http.StatusBadRequest,