LDAP Clients
Install nss_ldap
Edit /etc/ldap.conf
host     ldap1.example.com ldap2.example.com
base     dc=example,dc=com
ssl         start_tls
tls_checkpeer   yes
tls_cacertfile   /etc/ssl/ca-cert.pem
Edit /etc/openldap/ldap.conf
URI ldaps://ldap1.example.com/ ldaps://ldap2.example.com/
BASE dc=example,dc=com