---
ldap_server_cert: "{% if ldap_master is defined %}ldap01.foo.sh{% else %}\
 ldap.foo.sh{% endif %}"