# ldap_tls_cipher_suite

Optional. You can specify the cipher suite to use for encryption on secure LDAP connections.

    ldap_tls_cipher_suite = cipher_suite

This parameter must follow the OpenSSL cipher string syntax; see Specify Cipher Suites. You must use OpenSSL names when specifying the suite. For example, use `AES128-SHA` rather than `TLS_RSA_WITH_AES_128_CBC_SHA`. Using Java names results in an authorization error when connecting to a client.

In addition to the actual cipher names, you may specify cipher quality; for example:

- `HIGH`
- `HIGH:MEDIUM`

Copyright © Cloud Software Group, Inc. All rights reserved.