Because the PTA plug-in must send bind credentials including the password to the authenticating directory, we recommend using a secure connection. To configure the PTA directory to communicate with the authenticating directory over SSL:
Configure and enable SSL in both the PTA and authenticating directories, as described in Chapter 5, Directory Server Security.
Create or modify the PTA plug-in configuration to use LDAPS and the secure port in the LDAP URL, for example:
ldaps://host:secure-port/subtree |