+# operator = optional, and may not be present.
+# If not present, defaults to "==" for checkItems,
+# and "=" for replyItems.
+# If present, the operator here should be one
+# of the same operators as defined in the "users"3
+# file ("man users", or "man 5 users").
+# If an operator is present in the value of the
+# LDAP entry (i.e. ":=foo"), then it over-rides
+# both the default, and any operator given here.