If your domain environment has the GPO “Domain controller: LDAP server signing requirements” enabled, you must connect to Active Directory or LDAP using SSL.
In Windows, follow the steps in Article 2160.
A similar Linux procedure is pending and will be posted here when available.