Thread:Extension talk:LDAP Authentication/Creation and modification of users in LDAP/reply

So, it looks like the schema I'm using for this is hardcoded, and uses the following attributes and objectclasses:

Note that the auth attribute only gets set if you set a value for it.

If you are using Active Directory, this schema doesn't exist, and the add will fail. This, of course, is unfortunate, as you'd be the first person to request this :). If you need it, I'll add in a new option to fix this for you.