Add certificate configuration option

[orbatschow]

Adding the following variables:

ldap_tls_cacert

I also included a new file to make the role work in Debian. This can however not automatically be tested, as molecule only supports CentOS and Ubuntu as far as I know. - It works on Debian Buster though.

I think we can merge this and flag Debian as not tested (if at all).

[elcomtik]

@orbatschow great work. I would appreciate if it was merged, as I need this for Debian systems.

Code seems good for me. If you add tests for Debian, then I think maintainer wouldn't hesitate to merge.

Test can be added to molecule.yml config (https://github.com/hellofresh/ansible-sssd-ldap/blob/master/molecule/default/molecule.yml). I suggest usage of image alexdzyoba/debian-systemd:9 (https://github.com/alexdzyoba/docker-debian-systemd) and configuration like ubuntu-xenial.

[orbatschow]

@elcomtik thank you!

The link you provided only covers Debian 9. As the current Debian version is 10 and this image is a modification to the original image I doubt that it will make sense to test it with a basically different image (https://github.com/alexdzyoba/docker-debian-systemd is also more than two years old).

Furthermore, this repository does not seem to be maintained anymore. (Last commit is almost 1 year ago.)

Maybe @antonu17 can provide some information about the status of this repo.