BASE    dc=example,dc=com
URI     ldaps://[::1]:636/
TLS_CACERT     /etc/ldap/server_cert.pem
TLS_REQCERT allow
SASL_NOCANON    on