improve ldap tls/ssl config when no /etc/ldap.conf is there