Changed ldap_tls_cacertdir to ldap_tls_cacert. cacertdir doesn't work on Ubuntu. Certificate files can be concatenated to make this work.