BASE	dc=my-domain,dc=com
URI     ldapi:///
TLS_CACERTDIR	/etc/openldap/certs
# Turning this off breaks GSSAPI used with krb5 when rdns = false
SASL_NOCANON	on