diff --git a/ldap/templates/slapd.conf.erb b/ldap/templates/slapd.conf.erb
index ac54d77..4db5924 100644
--- a/ldap/templates/slapd.conf.erb
+++ b/ldap/templates/slapd.conf.erb
@@ -42,7 +42,7 @@ moduleload <%= name %>.la
 TLSCertificateFile	<%= scope.lookupvar('ssl::certs') %>/slapd.crt
 TLSCertificateKeyFile	<%= scope.lookupvar('ssl::private') %>/slapd.key
 TLSCACertificatePath	<%= scope.lookupvar('ldap::server::config') %>/cacerts
-TLSVerifyClient		never
+TLSVerifyClient		try
 
 # include database configs
 include		<%= scope.lookupvar('ldap::server::config') %>/slapd.conf.d/database.conf