···

       
19
       
19
       
 
       
      bind_policy ${config.users.ldap.bind.policy}

     

       
20
       
20
       
 
       
      ${optionalString config.users.ldap.useTLS ''

     

       
21
       
21
       
 
       
        ssl start_tls

     

       
22
       
22
       
-
       
        tls_checkpeer no

     

       
23
       
22
       
 
       
      ''}

     

       
24
       
23
       
 
       
      ${optionalString (config.users.ldap.bind.distinguishedName != "") ''

     

       
25
       
24
       
 
       
        binddn ${config.users.ldap.bind.distinguishedName}