users.sls

{% set ldap_base = salt['pillar.get']('openldap:base', "dc=localdomain") %}
---
ldap_add_entries:
    ldap.managed:
      - connect_spec:
          url: "127.0.0.1"
          bind:
            method: simple
            dn: "{{ salt['pillar.get']('openldap:rootdn') }}"
            password: "{{ salt['pillar.get']('openldap:rootpw') }}"
      - entries:
        - ou=Groups,{{ ldap_base }}:
          - default:
              ou: Groups
              objectClass: 
                - top
                - organizationalunit