ldap + ssl confusion