On 05/15/2013 01:34 PM, Augustin Wolf wrote: > Is there a way to enforce kerberos to use TLS/SSL while communicating > to OpenLDAP? You can use an ldaps:// URL, and specify TLS parameters in ldap.conf(5) if any are needed. We don't yet support using StartTLS over the regular LDAP port.