---
- name: Install packages
  ansible.builtin.package:
    name: openldap-clients
    state: installed

- name: Create config
  ansible.builtin.template:
    dest: /etc/openldap/ldap.conf
    src: ldap.conf.j2
    mode: "0644"
    owner: root
    group: "{{ ansible_wheel }}"

- name: Authenticate to server with host certs when running as root
  ansible.builtin.template:
    dest: /root/.ldaprc
    src: ldaprc.j2
    mode: "0600"
    owner: root
    group: "{{ ansible_wheel }}"