---

ldap_client_config:
  - comment: CA truststore
    option: TLS_CACERT
    value: /etc/ssl/certs/testca.cert.pem
  - comment: Ensure TLS is enforced
    option: TLS_REQCERT
    value: demand
  - comment: Default URI to connect to
    option: URI
    value: ldaps://ldap-server/
  - comment: Base entry
    option: BASE
    value: dc=local