Lightweight Directory Access Protocol over SSL/TLS
LDAPS wraps LDAP traffic in TLS encryption, typically on port 636 instead of the plaintext port 389. Without it, credentials and directory data cross the network in the clear where attackers can capture them. Hardening guides routinely require LDAPS or StartTLS for any directory authentication.