allowing TLS and Certificate to be NOT defined

roles/ldapclient/templates/sssd.j2

@@ -28,9 +28,17 @@ ldap_chpass_uri = {{ ldapURI }}
 {% else %}
 ldap_uri = {{ ldapURI }} 
 {% endif %}
+ldap_id_use_start_tls = {{ useTLS }}
+{% if useTLS is not defined%}
+ldap_tls_reqcert = never 
 ldap_id_use_start_tls = True
-ldap_tls_reqcert = allow 
+{% else %}
+ldap_tls_reqcert = always 
+ldap_id_use_start_tls = {{ useTLS }}
+{% endif %}
+{% if ldapCaCertFile is defined %}
 ldap_tls_cacert = {{ ldapCaCertFile }}
+{% endif %}
 ldap_default_bind_dn = {{ ldapBindDN }} 
 ldap_default_authtok_type = password
 ldap_default_authtok = {{ ldapBindDNPassword }}