server_host = {{ ldap_uri }}
tls_ca_cert_file = /etc/ssl/certs/ca-certificates.crt
tls_require_cert = yes
bind = yes
bind_dn = {{ ldap_binddn }}
bind_pw = {{ ldap_bindpw }}
version = 3

search_base = {{ ldap_base }}
query_filter = (&(objectClass=kitchenUser)(mail=%s))
result_attribute = uid
result_format = %u/.maildir/