BASE {{ ldap_basedn }}
URI {% for item in ldap_server %}ldaps://{{ item }} {% endfor %}

TLS_CACERT {{ tls_bundle }}
TLS_REQCERT demand