added role parameter: openldap_server_dn for the dn suffix