Use sane default settings for ldap connections
    
    LDAP connections no longer depend on sane settings in global ldap.conf
    and use good default settings for cert validation, CA, and SASL canonization.
    
    https://pagure.io/freeipa/issue/7418
    
    Signed-off-by: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>