Add a new property:

# Set to true to authenticate with user@domain instead of just user
# against ldap server.
useFullLoginInfo=false

to support LDAP authentication with e.g. mail attribute matching instead of uid.