}
		// Save each attribute to claims.
		claims[ldapAttribPrefix+attribKey] = attribValue[0]
	}

	if key != nil {
		// If a key was provided, we expect the user to have an sshPublicKey
		// attribute.
		if _, ok := claims[ldapAttribPrefix+"sshPublicKey"]; !ok {
			return nil, errAuthentication
		}
	}

	expiryDur, err := globalIAMSys.LDAPConfig.GetExpiryDuration("")
	if err != nil {
		return nil, err
	}

		}

		// Validate claims. Check if the sshPublicKey claim is present.
		dnClaim := claims.MapClaims[ldapActualUser].(string)
		if dnClaim != testCase.dn {
			c.Fatalf("Test %d: unexpected dn claim: %s", i+1, dnClaim)
		}
		sshPublicKeyClaim := claims.MapClaims[ldapAttribPrefix+"sshPublicKey"].([]any)[0].(string)
		if sshPublicKeyClaim == "" {
			c.Fatalf("Test %d: expected sshPublicKey claim to be present", i+1)
		}