syncrepl rid=<%= rid %>
    provider=ldaps://ldap-master.<%= domain %>:636
    type=refreshAndPersist
    searchbase="<%= dc_suffix %>"
    schemachecking=off
    bindmethod=simple
    binddn="cn=syncuser-<%= hostname%>,ou=System Accounts,<%= dc_suffix %>"
    credentials=<%= sync_password %>
    tls_reqcert=never

updateref ldaps://ldap-master.<%= domain %>:636