Switching from LDAP to Secure LDAPSΒΆ

Default installation of Active Directory allows simple LDAP binds out of the box. This works nicely, but nowadays such deployments are considered insecure, so Microsoft recommends that you switch to more secure LDAPS according to the article https://support.microsoft.com/en-us/topic/2020-2023-and-2024-ldap-channel-binding-and-ldap-signing-requirements-for-windows-kb4520412-ef185fb8-00f7-167d-744c-f299a66fc00a.

The following steps of this tutorial will explain how this can be done.