Thanks, Andy. I'll need a bit of time to review it in detail, but on first glance the patch looks very good. Will let you know if I see anything major, but I expect we'll be able to get this into 12.1.

One question that just dawned on me: is there a reason why the new properties must reside in the labkey.xml file? The other LDAP properties are stored in the database and accessed via the admin UI… it seems odd to have these in two places.

Thanks, Adam