Considering that 6.3.4 and 6.3.5 now use a new openssl version, due to new vulnerabilities found, the LDAP server needs to have the most up-to-date default cipher list in order to be approved by the splunk default cipher list. If it is not possible to update the default cipher list on the LDAP server (AD 2003 for instance is buggy and update won't be possible - SPL-109427), then following workaround should be applied: 1) obtain Ciphers configured on your LDAP server. 2) tweak TLS_CIPHER_SUITE command in etc/openldap/ldap.conf to match it. HTH. ... View more