overlay remoteauth

# defaults
#remoteauth_retry_count 3
#remoteauth_store off

remoteauth_tls starttls=critical
    tls_cert=@TESTDIR@/tls/certs/localhost.crt
    tls_key=@TESTDIR@/tls/private/localhost.key
    tls_cacert=@TESTDIR@/tls/ca/certs/testsuiteCA.crt

remoteauth_dn_attribute seeAlso
remoteauth_domain_attribute o
remoteauth_default_domain default
remoteauth_default_realm @SURIP3@

# It's a trap! (ehm... stack) cn=config entries will be emitted in reverse order
remoteauth_mapping self @URIP1@
remoteauth_mapping failing_ldaps @SURIP2@
remoteauth_mapping working_ldaps @SURIP3@
remoteauth_mapping default file://@TESTDIR@/default_domain