From 03ada9a5ed66636476ef1514db1e663fff3b3552 Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Thu, 24 Feb 2022 23:54:37 +0000
Subject: [PATCH] ldap_server: Add cacert path for replication

---
 roles/ldap_server/templates/slapd.conf.j2 | 1 +
 1 file changed, 1 insertion(+)

diff --git a/roles/ldap_server/templates/slapd.conf.j2 b/roles/ldap_server/templates/slapd.conf.j2
index e2466cc..5e35eeb 100644
--- a/roles/ldap_server/templates/slapd.conf.j2
+++ b/roles/ldap_server/templates/slapd.conf.j2
@@ -98,6 +98,7 @@ syncrepl rid={{ 999 | random(seed=inventory_hostname) }}
     timelimit=360000
     schemachecking="off"
     bindmethod="simple"
+    tls_cacert="{{ tls_bundle }}"
     tls_reqcert="demand"
     binddn="uid=replicator,cn={{ inventory_hostname }},ou=Hosts,{{ ldap_basedn }}"
     credentials="{{ ldap_replicator_pass[inventory_hostname] }}"