anchor.diff:  		#  'no' and the access_attribute is present, then
   		#  access will not be allowed.
   		#
  -		#  If the value of the access_attribute is 'false', it
  -		#  will negate the result.
  +		#  If the value of the retrieved access_attribute is
  +		#  'false', it will negate the result.
   		#
   		#  e.g.
   		#    access_positive = yes
  
positive.code:  		#
  		#  The default is libldap's default, which varies based
  		#  on the contents of ldap.conf.
  		require_cert	= '<%= @requirecert %>'
  	}
  
  	#  As of version 3.0, the 'pool' section has replaced the
  
negative.code: 		start_tls = <%= @starttls %>
  
  <% if @cafile != '' -%>
  		ca_file = <%= @cafile %>
  <% end -%>
  #               ca_path = ${certdir}
  <% if @certfile != '' -%>
  		certificate_file = <%= @certfile %>
  <% end -%>
  