apiVersion: v1
kind: ConfigMap
metadata:
  name: ldapclient-cm
  namespace: mapr-configuration-cspaces
data:
  ldap.conf: |
    #
    # LDAP Defaults
    #
    # See ldap.conf(5) for details
    # This file should be world readable but not world writable.

    BASE example.com
    URI ldaps://ldap-svc.ldap.svc.cluster.local/
    #SIZELIMIT      12
    #TIMELIMIT      15
    #DEREF          never

    TLS_CACERTDIR  /etc/openldap/certs
    TLS_REQCERT    allow

    # Turning this off breaks GSSAPI used with krb5 when rdns = false
    SASL_NOCANON   on
