BASE dc=example,dc=com URI ldapi:// TLS_CACERTDIR /etc/ssl/certs/ TLS_REQCERT never