During initialization the security manager attempts to connect to the AD in order to first verify it can connect and to collect some information to determine the AD type. This connection is attempted using the configured protocol (ldap or ldaps). If it fails and is configured for a secure connection, it falls back to an insecure connection. When configured for secure connections, It should never attempt an insecure connection.

Recently some AD connection issues, related to cluster configuration not the LDAP security manager, caused confusion when log entries indicated attempts to make an insecure connection.

In short, when configured for a secure connection, the manager should not attempt an insecure connection.