Add ntp and ldap client roles
update default cacert
fixed conflict