uid nslcd gid nslcd uri ldap://example.com base ou=Customers,dc=example,dc=com binddn cn=customerAccountAdmin,ou=Manager,dc=example,dc=com bindpw rootpwmoddn cn=customerAccountAdmin,ou=Manager,dc=example,dc=com rootpwmodpw ssl start_tls tls_cacertfile /etc/ldap/tls/CA.pem tls_reqcert hard