From 8cd9dc556f10bff323e18fcb02d6a846daeac0c8 Mon Sep 17 00:00:00 2001
From: Andrea Dell'Amico <andrea.dellamico@isti.cnr.it>
Date: Mon, 4 Nov 2019 18:54:21 +0100
Subject: [PATCH] Fix a wrong option in the LDAP template.

---
 library/roles/openvpn/templates/auth-ldap.conf.j2 | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/library/roles/openvpn/templates/auth-ldap.conf.j2 b/library/roles/openvpn/templates/auth-ldap.conf.j2
index 3c83a1fb..de6b4fd1 100644
--- a/library/roles/openvpn/templates/auth-ldap.conf.j2
+++ b/library/roles/openvpn/templates/auth-ldap.conf.j2
@@ -63,7 +63,9 @@
         <Group>
                BaseDN          "{{ openvpn_ldap_group_base }}"
                SearchFilter    "{{ openvpn_ldap_group_filter }}"
+{% if openvpn_ldap_without_posix_groups %}
                RFC2307bis      {{ openvpn_ldap_without_posix_groups }}
+{% endif %}
                MemberAttribute {{ openvpn_ldap_group_member_attr }}
                # Add group members to a PF table (disabled)
         #       #PFTable        ips_vpn_eng