diff --git a/README.md b/README.md
index 82efd0b..7f98b25 100644
--- a/README.md
+++ b/README.md
@@ -10,12 +10,13 @@ keepass entry for opendoor/collidine_ldap_password
 
 Role Variables
 --------------
-org: no default
-ldap_base - from group variables
-nlu_dn_attribute - TODO: defaults override host var in this case ? firstname or email
-binddn - from group variables
-bindpwd - from group variables
-file : default account.csv csv file containing user to create:
+
+  * org: no default
+  * ldap_base - from group variables
+  * nlu_dn_attribute - firstname or email - default to email
+  * binddn - from group variables
+  * bindpwd - from group variables
+  * file : default account.csv csv file containing user to create:
 
 ```csv
 firstname,lastname,email,[password]
diff --git a/defaults/main.yml b/defaults/main.yml
index 56fa136..949c5fe 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -1,2 +1,3 @@
 ---
 # defaults file for tco.new_ldap_user
+nlu_dn_attribute: email