Chapter 4. Initial configuration 111
– Security
Choose between None, SSL, or Transport Layer Security. Using some form of 
security ensures that user credentials are encrypted before being transmitted. Select 
SSL to use LDAP over SSL (LDAPS) to establish secure connections using port 636 
for negotiation and data transfer. Select Transport Layer Security to establish secure 
connections using Start TLS, allowing both encrypted and decrypted connections to be 
handled by the same port. 
In this example, we choose SSL, as shown in Figure 4-26.
Figure 4-26   Configure remote authentication: Mandatory LDAP settings
– Service Credentials
Figure Figure 4-27 on page 112 shows advanced and optional setting. Consult the 
administrator of the LDAP server that you plan to use for the information to ensure the 
fields are filled correctly.
If your LDAP server supports anonymous bind, leave Distinguished Name and 
Password empty. Otherwise, enter the credentials of a user defined on the LDAP 
server with permission to query the LDAP directory. You can enter this information in 
the format of an email address (for example, administrator@ssd.hursley.ibm.com) or 
as a distinguished name (for example, 
zcn=Administrator,cn=users,dc=ssd,dc=hursley,dc=ibm,dc=com).