ldap_servers: {% for server in ldap_server %}ldaps://{{ server }} {% endfor %} ldap_search_base: {{ ldap_basedn }} ldap_tls_check_peer: yes ldap_tls_cacert_file: {{ tls_bundle }} ldap_auth_method: fastbind ldap_filter: uid=%u,ou=People,{{ ldap_basedn }}