BASE	dc=example,dc=com
URI	ldapi://
TLS_CACERTDIR	/etc/ssl/certs/
TLS_REQCERT never