cdist/conf/type/__openldap_server/manifest

@@ -19,7 +19,7 @@ CONF_OWNER="root"
 CONF_GROUP="root"
 case "${os}" in
     freebsd)
-        PKGS="openldap-server"
+        PKGS="openldap26-server"
         ETC="/usr/local/etc"
         SLAPD_DIR="/usr/local/etc/openldap"
         SLAPD_DATA_DIR="/var/db/openldap-data"
@@ -197,12 +197,12 @@ if [ -z "${_skip_letsencrypt_cert}" ]; then
         staging=""
     fi
 
+    __directory "${SLAPD_DIR}/sasl2"
     # shellcheck disable=SC2086
-    __directory ${SLAPD_DIR}/sasl2
     require="__directory/${SLAPD_DIR}/sasl2" __letsencrypt_cert "${name}" \
         --admin-email "${admin_email}" \
         --renew-hook "cp ${ETC}/letsencrypt/live/${name}/*.pem ${SLAPD_DIR}/sasl2 && chown -R ${CONF_OWNER}:${CONF_GROUP} ${SLAPD_DIR}/sasl2 && service slapd restart" \
-        --automatic-renewal "${staging}"
+        --automatic-renewal ${staging}
 fi
 
 require="__package/${PKG_MAIN}" __directory ${SLAPD_DIR}/slapd.d --state absent

cdist/conf/type/__openldap_server/parameter/default/schema

@@ -8,5 +8,4 @@ java
 misc
 nis
 openldap
-ppolicy
 collective