BASE    dc=@@subdomain@@,dc=@@domain@@,dc=@@tld@@
URI     ldaps://@@server-hostname@@
TLS_REQCERT never