add openvpn-ldap role