diff --git a/ansible/roles/openldap_server/tasks/acls.yaml b/ansible/roles/openldap_server/tasks/acls.yaml
index 96a244a..8dcb937 100644
--- a/ansible/roles/openldap_server/tasks/acls.yaml
+++ b/ansible/roles/openldap_server/tasks/acls.yaml
@@ -18,4 +18,4 @@
           by * none
   args:
     server_uri: ldapi:///
-    sasl_class: EXTERNAL
+    sasl_class: external
diff --git a/ansible/roles/openldap_server/tasks/config.yaml b/ansible/roles/openldap_server/tasks/config.yaml
index e1f26c8..58b658f 100644
--- a/ansible/roles/openldap_server/tasks/config.yaml
+++ b/ansible/roles/openldap_server/tasks/config.yaml
@@ -7,4 +7,4 @@
       olcRootDN: "{{ ldap_admin_dn }}"
   args:
     server_uri: ldapi:///
-    sasl_class: EXTERNAL
+    sasl_class: external
diff --git a/ansible/roles/openldap_server/tasks/tls.yaml b/ansible/roles/openldap_server/tasks/tls.yaml
index 011b435..1d115fa 100644
--- a/ansible/roles/openldap_server/tasks/tls.yaml
+++ b/ansible/roles/openldap_server/tasks/tls.yaml
@@ -9,7 +9,7 @@
       olcTLSCipherSuite: HIGH:!aNULL:!MD5
   args:
     server_uri: ldapi:///
-    sasl_class: EXTERNAL
+    sasl_class: external
 
 - name: Require TLS
   community.general.ldap_attrs:
@@ -19,4 +19,4 @@
       olcSecurity: tls=1
   args:
     server_uri: ldapi:///
-    sasl_class: EXTERNAL
+    sasl_class: external