From a7e88f6f3b8092b96516efe87e7e404d574d77ca Mon Sep 17 00:00:00 2001
From: Garhan Attebury <garhan.attebury@unl.edu>
Date: Mon, 8 Dec 2014 13:17:28 -0600
Subject: [PATCH] always throw in tls_reqcert as it has a sane default

---
 templates/openldap-ldap.conf.erb | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/templates/openldap-ldap.conf.erb b/templates/openldap-ldap.conf.erb
index 6e7e67a..e97c520 100644
--- a/templates/openldap-ldap.conf.erb
+++ b/templates/openldap-ldap.conf.erb
@@ -22,8 +22,6 @@
 URI <%= @uri %>
 BASE <%= @base %>
 
-<% if @tls_reqcert -%>
-<% if @tls_cacert -%>TLS_CACERT <%= @tls_cacert %><% end -%>
-<% if @tls_cacertdir -%>TLS_CACERTDIR <%= @tls_cacertdir %><% end -%>
+<% if @tls_cacert -%>TLS_CACERT <%= @tls_cacert %><% end %>
+<% if @tls_cacertdir -%>TLS_CACERTDIR <%= @tls_cacertdir %><% end %>
 TLS_REQCERT <%= @tls_reqcert %>
-<% end -%>