write ldap datadirectory handling more cleanly

roles/ldap/server/defaults/main.yml

@@ -1,3 +1,4 @@
 ---
 ldap_server_cert: "{% if ldap_master is defined %}ldap01.foo.sh{% else %}\
  ldap.foo.sh{% endif %}"
+ldap_datadir: /srv/ldap

roles/ldap/server/tasks/main.yml

@@ -7,41 +7,26 @@
     - openldap-servers
     - ldapvi
 
-- block:
-  - name: fix selinux context from ldap data directory
-    sefcontext:
-      path: /export/ldap(/.*)?
-      setype: slapd_db_t
-  - name: create ldap data directory
-    file:
-      path: /export/ldap
-      state: directory
-      mode: 0700
-      owner: ldap
-      group: ldap
-  - name: link ldap data directory
-    file:
-      path: /srv/ldap
-      src: /export/ldap
-      state: link
-      owner: root
-      group: root
-      follow: false
-  when: ldap_master is defined
-
-- block:
-  - name: fix selinux context from ldap data directory
-    sefcontext:
-      path: /srv/ldap(/.*)?
-      setype: slapd_db_t
-  - name: create ldap data directory
-    file:
-      path: /srv/ldap
-      state: directory
-      mode: 0700
-      owner: ldap
-      group: ldap
-  when: ldap_msater is not defined
+- name: fix selinux context from ldap data diretory
+  sefcontext:
+    path: "{{ ldap_datadir }}(/.*)?"
+    setype: slapd_db_t
+- name: create ldap data directory
+  file:
+    path: "{{ ldap_datadir }}"
+    state: directory
+    mode: 0700
+    owner: ldap
+    group: ldap
+- name: link ldap data directory
+  file:
+    path: /srv/ldap
+    src: /export/ldap
+    state: link
+    owner: root
+    group: root
+    follow: false
+  when: ldap_datadir != "/srv/ldap"
 
 - name: remove nss cert databases
   file: