diff --git a/apache/files/_auth.conf b/apache/files/_auth.conf
index f4a287c..0703c70 100644
--- a/apache/files/_auth.conf
+++ b/apache/files/_auth.conf
@@ -32,20 +32,18 @@
 {%- if site.auth.ldap.interact is defined %}
   AuthLDAPBindSASLInteract "{{ site.auth.ldap.interact }}"
 {%- else %}
-  AuthLDAPBindSASLInteract "/usr/bin/kinit -k -t {{ site.auth.kerberos.get("keytab", "/etc/apache2/ipa.keytab") }} {{ site.auth.kerberos.service }}/{{ site.host.name }}"
+  AuthLDAPBindSASLInteract "/usr/bin/kinit -k -t {{ site.auth.kerberos.get("keytab", "/etc/apache2/ipa.keytab") }} {{ site.auth.kerberos.get("service", "HTTP") }}/{{ site.host.name }}"
 {%- endif %}
-  AuthLDAPURL "ldaps://<%=scope.function_hiera(['ipa_servers'])%>/dc=intgdc,dc=com?krbPrincipalName"
+  AuthLDAPURL "{{ site.auth.ldap.url }}"
 {%- endif %}
 
 {%- endif %}
 
-  AuthName "{{ salt.auth.get("name", "Authentication required") }}"
-{%- if salt.auth.require is defined %}
-{%- for require in salt.auth.require %}
+  AuthName "{{ site.auth.get("name", "Authentication required") }}"
+{%- if site.auth.require is defined %}
+{%- for require in site.auth.require %}
   Require {{ require }}
 {%- endfor %}
 {%- else %}
   Require valid-user
 {%- endif %}
-
-{%- endif %}