anchor.diff: +<%
  +schemas = hiera(ldapserver::schemas)
  +modules = hiera(ldapserver::modules)
  +ldap_indexes = hiera(ldapserver::indexes)
  +ldap_servers = hiera(ldapserver::slapd_peers)
  +-%>
  +
   ## This file is managed by puppet, all local changes will be lost
   ## during the next puppet catalog run
   
  
positive.code: 
  <%- end -%>
  
  
  
  
  #######################################################################
  # ACL Directives:
  
  ############################################################################################
  # README:
  # If you add, or edit any ACL below ensure that the following lines are always included:
  #   by group.exact="cn=apldap,ou=groups,ou=services,dc=apache,dc=org" write
  #   by dn="cn=ldaprepl,ou=users,ou=services,dc=apache,dc=org" read
  #   by dn="cn=nss_ldap,ou=users,ou=services,dc=apache,dc=org" read
  
  # This will ensure that the APLDAP group can manage the LDAP tree, and that the records
  # are able to be replicated, and used for login accounts.
  
negative.code: 
  # Schema and objectClass definitions
  <%-
  schemas.each do |schema|
  -%>
  include        /etc/ldap/schema/<%= schema %>.schema
  <%- end -%>
  
  # Where the pid file is put. The init.d script
  # will not stop the server if you change this.
  pidfile        /var/run/slapd/slapd.pid
  
  # List of arguments that were passed to the server
  argsfile        /var/run/slapd/slapd.args
  
  # Read slapd.conf(5) for possible values
  #loglevel        none
  loglevel        <%= loglevel %>
  
  # Where the dynamically loaded modules are stored
  modulepath      <%= modulepath %>
  
  <%-
  modules.each do |module|
  -%>
  moduleload      <%= module %>
  <%- end -%>
  
  # The maximum number of entries that is returned for a search operation
  sizelimit      <%= sizelimit %>
  
  # The tool-threads parameter sets the actual amount of cpu's that is used
  # for indexing.
  