Fix the conditionals.

templates/shiro.ini.j2

@@ -118,7 +118,8 @@ api_role = *
 /api/version = anon
 {% if not cdh_zeppelin_secure_urls %}
 /** = anon
-{% elseif cdh_zeppelin_ldap_advanced_config %}
+{% else %}
+{% if cdh_zeppelin_ldap_advanced_config %}
 /api/interpreter/setting/restart/** = authc
 {% if cdh_zeppelin_local_api_user %}
 /api/interpreter/** = {{ cdh_zeppelin_secure_interpreter_api_roles }}
@@ -131,3 +132,4 @@ api_role = *
 {% else %}
 /** = authc
 {% endif %}
+{% endif %}