--- ldap_admin_password: adminpassword # ldap_client ldap_client_config: - comment: CA truststore option: TLS_CACERT value: /etc/ssl/certs/testca.cert.pem - comment: Ensure TLS is enforced option: TLS_REQCERT value: demand # common vars (not the role, global common) tls_private_key_dir: tests/data/x509/ tls_certificate_dir: tests/data/x509/