dn: cn=config
changetype: modify
replace: olcSaslHost
olcSaslHost: {{ ldap_hostname }}
-
replace: olcSaslRealm
olcSaslRealm: {{ krb5_realm }}
-
replace: olcAuthzRegexp
olcAuthzRegexp: {0}uid=([^/]+)/admin,cn={{ krb5_realm | lower }},cn=gssapi,cn=auth cn=admin,{{ base_dn }}
olcAuthzRegexp: {1}uid=([^,]+),cn={{ krb5_realm | lower }},cn=gssapi,cn=auth uid=$1,ou=users,{{ base_dn }}