+ if [ "$LDAP_GROUP_OBJECTCLASS" ]; then
+ echo "group_objectclass = $LDAP_GROUP_OBJECTCLASS" >> /etc/keystone/domains/keystone.$LDAP_AUTHENTICATION_DOMAIN_NAME.conf
+ fi
+ if [ "$LDAP_GROUP_TREE_DN" ]; then
+ echo "group_tree_dn = $LDAP_GROUP_TREE_DN" >> /etc/keystone/domains/keystone.$LDAP_AUTHENTICATION_DOMAIN_NAME.conf
+ fi
+ if [ "$LDAP_TLS_CACERT_BASE64" ]; then
+ mkdir -p /etc/ssl/certs/
+ echo "-----BEGIN CERTIFICATE-----" >> /etc/ssl/certs/ca-certificates.crt
+ echo $LDAP_TLS_CACERT_BASE64 >> /etc/ssl/certs/ca-certificates.crt
+ echo "-----END CERTIFICATE-----" >> /etc/ssl/certs/ca-certificates.crt
+ fi
+ if [ "$LDAP_USE_STARTTLS" ] && [ "$LDAP_USE_STARTTLS" == "true" ]; then