URI            ldapi:///
BASE           ${basedn}
USE_SASL       yes
ROOTUSE_SASL   yes
SASL_MECH      EXTERNAL
SASL_REALM     ${realm}
GSSAPI_SIGN    yes
GSSAPI_ENCRYPT yes
SUDOERS_BASE   ${sudo_basedn}