
pidfile			/var/run/slapd/slapd.pid
argsfile		/var/run/slapd/slapd.args
loglevel		@%@ldap/debug/level@%@
allow			bind_v2 update_anon

TLSCertificateFile	/etc/univention/ssl/@%@hostname@%@.@%@domainname@%@/cert.pem
TLSCertificateKeyFile	/etc/univention/ssl/@%@hostname@%@.@%@domainname@%@/private.key
TLSCACertificateFile	/etc/univention/ssl/ucsCA/CAcert.pem
@!@
from os.path import exists
ciphers = configRegistry.get("ldap/tls/ciphersuite")
if ciphers:
    print('TLSCipherSuite	%s' % (ciphers,))
protocol = configRegistry.get("ldap/tls/minprotocol")
if protocol:
    print('TLSProtocolMin	%s' % (protocol,))
filename = configRegistry.get("ldap/tls/dh/paramfile")
if filename and exists(filename):
    print('TLSDHParamFile	%s' % (filename,))
@!@

sizelimit @%@ldap/sizelimit@%@
idletimeout @%@ldap/idletimeout@%@

@!@
opts = configRegistry.get('ldap/attributeoptions')
if opts:
    text = ' '.join('"%s"' % (x.strip(),) for x in opts.split(','))
    print('attributeoptions %s' % (text,))
@!@
