Not sure what happen, but should comment 1 should have looked like this: Modifying the /etc/ldap.conf via "yast ldapkrb" (ncurses mode) and check marking option "(X) Secure Communication via TLS" as described here https://wiki.suse.net/index.php?title=SUSE-Development/OPS/LDAP resulted in a correct /etc/ldap.conf with "ssl yes", but if I reopen "yast ldapkrb", it do not show "( ) Secure Communication via TLS" being check marked. I can provide logs, but this should be easy to validate without.