BASE	dc=my-domain,dc=com
URI	ldap://ldap.my-domain.com:389
sl start_tls
TLS_CACERT /etc/openldap/ssl/cacert.pem