ldap_uris: [] ldap_search_base: DC=example,DC=com ldap_bind_dn: "UID=rd-only,CN=users,{{ ldap_search_base }}" ldap_bind_password: "rd-only" ldap_cert: ldap-ca.pem ldap_admins: - "memberof=CN=admins,CN=groups,{{ ldap_search_base }}" ldap_shell_users: - "memberof=CN=shell,CN=groups,{{ ldap_search_base }}" ldap_mail_users: - "memberof=CN=mail,CN=groups,{{ ldap_search_base }}" ldap_users: "{{ ldap_admins + ldap_shell_users }}"