Add parameters to the r_connector nslcd template so that we can choose the tls connection type

smartgears/r_connector/defaults/main.yml

@@ -28,3 +28,6 @@ r_connector_ldap_map_common:
   - common-password
   - common-session
   - common-session-noninteractive
+
+r_connector_ssl: on 
+r_connector_tls_reqcert: demand 

smartgears/r_connector/templates/nslcd.conf.j2

@@ -25,8 +25,8 @@ tls_cacertfile {{ r_connector_nslcd_cafile }}
 #rootpwmoddn cn=admin,dc=example,dc=com
 
 # SSL options
-#ssl off
-tls_reqcert demand
+ssl {{ r_connector_ssl }}
+tls_reqcert {{ r_connector_tls_reqcert }}
 
 # The search scope.
 #scope sub