The following directives map the object class `groupOfNames' to
the object class `groupOfUniqueNames' and the attribute type
`member' to the attribute type `uniqueMember':
map objectclass groupOfNames groupOfUniqueNames
map attribute uniqueMember member
This presents a limited attribute set from the foreign server:
map attribute cn *
map attribute sn *
map attribute manager *
map attribute description *
map attribute *
These lines map cn, sn, manager, and description to themselves,
and any other attribute gets "removed" from the object before it
is sent to the client (or sent up to the LDAP server). This is
obviously a simplistic example, but you get the point.