setting for /etc/sysconfig/ldap, setting for certificates in cn=config