BASE          ou=people,dc=konchin,dc=com
URI           ldaps://ldap
sudoers_base  ou=SUDOers,dc=konchin,dc=com

TLS_REQCERT   allow