ldapsearch -Y EXTERNAL -H ldapi:/// -b cn=config
ldapmodify -QY EXTERNAL -H ldapi:/// -f tls-config.ldif
ldapsearch -LLL -x -H ldap:// -s "base" -b "" supportedSASLMechanisms
ldapsearch -Y EXTERNAL -H ldapi:/// -b cn=config olcSuffix