added tls_checkpeer and nss_initgroups_ignoreusers

Both are not mentioned in ldap.conf(5) and I suspect
the later one to be a Debian-patch.