Well folks, I had a good case of misspelling. It works just fine.
Sorry for the inconvenience.
In case anyone is curious what my config looked like in /etc/gitlab/gitlab.rb
, it was this:
gitlab_rails['ldap_enabled'] = true
#gitlab_rails['prevent_ldap_sign_in'] = false
###! **remember to close this block with 'EOS' below**
gitlab_rails['ldap_servers'] = YAML.load <<-'EOS'
main: # 'main' is the GitLab 'provider ID' of this LDAP server
label: 'COMPANY LDAP'
host: 'hostname.company.org'
port: 389
uid: 'uid'
bind_dn: 'uid=gitlabsrv,cn=users,dc=company,dc=org'
password: 'testpassword' #change this
encryption: 'plain' # "start_tls" or "simple_tls" or "plain"
verify_certificates: false
smartcard_auth: false
active_directory: false
allow_username_or_email_login: true
lowercase_usernames: true
block_auto_created_users: false
base: 'cn=users,dc=company,dc=org'
user_filter: '(objectClass=organizationalPerson)'