Use FQDN for the gosa-desktop URL.
Set nslcd/ldap-cacertfile string to point to the debian-edu-server.crt file.
Change the nslcd/ldap-reqcert string from never to demand.
Add settings for lightdm and sddm (trying to prefer lightdm, sddm lacks a
language-chooser).