diff --git a/spec/defines/vhost_spec.rb b/spec/defines/vhost_spec.rb
index dcefbd1ba0..8d80a36f7f 100644
--- a/spec/defines/vhost_spec.rb
+++ b/spec/defines/vhost_spec.rb
@@ -183,6 +183,11 @@
                     '/foo.js',
                   ],
                 },
+                {
+                  'path'                => '/',
+                  'provider'            => 'location',
+                  'auth_ldap_referrals' => 'off',
+                },
                 {
                   'path'                                                => '/var/www/node-app/public',
                   'passenger_enabled'                                   => true,
@@ -600,6 +605,11 @@
               content: %r{^\s+Require any-valid2$},
             )
           }
+          it {
+            is_expected.to contain_concat__fragment('rspec.example.com-directories').with(
+              content: %r{^\s+LDAPReferrals off$},
+            )
+          }
           it {
             is_expected.to contain_concat__fragment('rspec.example.com-directories').with(
               content: %r{^\s+Options\sIndexes\sFollowSymLinks\sMultiViews$},
diff --git a/templates/vhost/_directories.erb b/templates/vhost/_directories.erb
index 8d92afbde7..aead27971d 100644
--- a/templates/vhost/_directories.erb
+++ b/templates/vhost/_directories.erb
@@ -290,6 +290,9 @@
     <%- if directory['auth_merging'] -%>
     AuthMerging <%= directory['auth_merging'] %>
     <%- end -%>
+    <%- if directory['auth_ldap_referrals'] -%>
+    LDAPReferrals <%= directory['auth_ldap_referrals'] %>
+    <%- end -%>
     <%- if directory['auth_ldap_url'] -%>
     AuthLDAPURL <%= directory['auth_ldap_url'] %>
     <%- end -%>