dn: cn=config changetype: modify replace: olcTLSCertificateFile olcTLSCertificateFile: {{ ldap_ssl_cert_path }} - replace: olcTLSCACertificatePath olcTLSCACertificatePath: /etc/ssl/certs - replace: olcTLSCertificateKeyfile olcTLSCertificateKeyfile: {{ ldap_ssl_key_path }} - replace: olcTLSProtocolMin olcTLSProtocolMin: 3.3 - replace: olctlsverifyclient olctlsverifyclient: never - replace: olctlscacertificatefile olctlscacertificatefile: {{ ldap_ssl_cert_path }}