URI ldap://localhost/
BASE {{ ldap_suffix }}
{%if ldap_have_ssl %}
TLS_CACERT {{ ldap_ssl_cacert_path }}
{%endif%}