Confusingly, ldap::role::server::labs is the server for labs, not a server in labs.

Change-Id: I55d259cfa538f35e57ee2b5ec64f53f5f66393d4