Only replace is working in ldapmodify for rootdn

buildKaraage3.x.yml

 ---
 -
   hosts: ldap-server
-  #pre_tasks:
-    #- sysctl: name=kernel.hostname value={{ inventory_hostname }} state=present
-    #  ignore_errors: yes
-    #- service: name=network state=restarted
-    #  when: ansible_os_family == 'Redhat'
+  pre_tasks:
+    - sysctl: name=kernel.hostname value={{ inventory_hostname }} state=present
+      ignore_errors: yes
+    - service: name=network state=restarted
+      when: ansible_os_family == 'Redhat'
   roles:
    - etcHosts
    - easy-rsa-CA
@@ -41,6 +41,11 @@
    - x509_common_name: "{{ inventory_hostname }}"
 - 
   hosts: karaage-server
+  pre_tasks:
+    - sysctl: name=kernel.hostname value={{ inventory_hostname }} state=present
+      ignore_errors: yes
+    - service: name=network state=restarted
+      when: ansible_os_family == 'Redhat'
   roles:
     - etcHosts
     - easy-rsa-certificate

roles/ldapserver/templates/manager_ldif.j2

 dn: {{ dbname }},cn=config
 changetype: modify
-add: olcSuffix
+replace: olcSuffix
 olcSuffix: {{ ldapDomain }}
 -
-add: olcRootDN
+replace: olcRootDN
 olcRootDN: {{ ldapManager }}