Given the amount of optional stuff, wouldn't it be best to have `fr3d_ldap: %ldap_config%` in config.yml, and then the whole config defined in the `ldap_config` parameter in parameters.yml.dist? That way the few people needing ldap can configure it to their liking without having to edit this file at all.