I am integrating my Unix box to the Windows AD using PAM_LDAP and Kerberos enabled.

I was wondering, since Kerberos is enabled. Is there any point to enable SSL on my LDAP.conf?

My understanding is that since Kerberos is enabled, therefore the username/password is sent securely, therefore there isn't any benefit of enabling SSL on the LDAP.conf? It's one or another.

Am I wrong?