I have openldap configured to authenticate users against an Active Directory 2003 server, and everything works fine, except the cleartext passwords/usernames being transmitted over the network.
How would I enable ldaps in this situation to eliminate cleartext passwords? Do I need a CA from the AD server or is there some other way?