port 389

Enable SSL for LDAP on your Windows 2003 Active Directory Service

Introduction

Windows 2003 ADS is as you probably already know is based upon LDAP. Often you will need to query this ldap directory for authentication and other purposes. By default these queries are carried out unencrypted and can be snooped by eavesdroppers. To remedy this you can enable ldap over SSL to allow LDAP queries to be done over encrypted channel. This guide tells you how to do this. For the purposes of the guide we only have one domain controller called "mypdc" which runs the ADS called "mytest.domain.com". Of course this will change according to your own setup.