# OpenLDAP cn=Monitor plugin with only ssl_ca deprecated option
[[inputs.openldap]]
  host = "localhost"
  port = 389

  # No ssl or tls option set

  # skip peer certificate verification. Default is false.
  insecure_skip_verify = false

  # Only ssl_ca is deprecated - should be migrated to tls_ca
  ssl_ca = "/path/to/ca-certificates.pem"

  # dn/password to bind with. If bind_dn is empty, an anonymous bind is performed.
  bind_dn = "cn=readonly,dc=company,dc=org"
  bind_password = "readonlypass"

  # reverse metric names so they sort more naturally
  reverse_metric_names = true