include_ldap_2level_query
        host     ldap.<%= domain %>
        use_tls  ldaps
        ssl_version tlsv1_2
        ca_verify none
        user     cn=sympa-<%= hostname %>,ou=System Accounts,<%= dc_suffix %>
        passwd   <%= scope.lookupvar("sympa::server::ldap_password") %>
        suffix1  ou=Group,<%= dc_suffix %>
        scope1   one
        filter1  (&(objectClass=groupOfNames)(cn=<%= name %>))
        attrs1   member
        select1  all
        suffix2  [attrs1]
        scope2   base
        filter2  (objectClass=inetOrgPerson)
        attrs2   mail
        select2  first