ldap_tls_cipher_suite

Optional. You can specify the cipher suite to use for encryption on secure LDAP connections.

ldap_tls_cipher_suite = cipher_suite

This parameter must follow the OpenSSL cipher string syntax; see Specify Cipher Suites. You must use OpenSSL names when specifying the suite. For example, use AES128-SHA rather than TLS_RSA_WITH_AES_128_CBC_SHA. Using Java names results in an authorization error when connecting to a client.

In addition to the actual cipher names, you may specify cipher quality; for example:

  • HIGH
  • HIGH:MEDIUM