################################################
#template config
database ldap
suffix "<%= @suffix %>"
readonly yes
protocol-version 3
uri "<%= @ldap_url %>"
rootdn "<%= @user_tree_dn %>"
tls start tls_reqcert=demand tls_cacert=/etc/ssl/certs/
idassert-bind   bindmethod=simple
                binddn="<%= @user %>"
                credentials="<%= @password %>"
                mode=self
idassert-authzFrom "*"