In the ldap.conf man page I can read: ... TLS_REQCERT <level> ... never The client will not request or check any server certificate. ... In this case the ldaps:// connection will be encrypted anyway? Isn't it? Ciao A