anchor.diff:  
     ###### implementation
   
  -  config = mkIf config.services.openldap.enable {
  +  config = mkIf cfg.enable {
   
       environment.systemPackages = [ openldap ];
   
  
positive.code:       after = [ "network.target" ];
        preStart = ''
          mkdir -p /var/run/slapd
          chown -R ${cfg.user}:${cfg.group} /var/run/slapd
          mkdir -p ${cfg.dataDir}
          chown -R ${cfg.user}:${cfg.group} ${cfg.dataDir}
        '';
        serviceConfig.ExecStart = "${openldap.out}/libexec/slapd -u ${cfg.user} -g ${cfg.group} -d 0 -h \"${concatStringsSep " " cfg.urlList}\" ${if cfg.configDir == null then "-f "+configFile else "-F "+cfg.configDir}";
      };
  
      users.extraUsers.openldap =
  
negative.code:   openldap = pkgs.openldap;
  
    configFile = pkgs.writeText "slapd.conf" cfg.extraConfig;
    configOpts = if cfg.configDir == null then "-f ${configFile}"
                 else "-F ${cfg.configDir}";
  in
  
  {
  