use variables for server settings and move from self signed cert to real ones

This commit is contained in:
Timo Makinen 2019-05-28 21:16:47 +03:00
parent fd9e792aec
commit 1a4aec1b66

View file

@ -1,5 +1,6 @@
BASE dc=foo,dc=sh
URI ldaps://ldap01.home.foo.sh
BASE {{ ldap_basedn }}
URI {% for item in ldap_server %}ldaps://{{ item }} {% endfor %}
TLS_CACERT {{ tls_certs }}/ca.crt
TLS_CACERT {{ tls_certs }}/cert.pem
TLS_REQCERT demand