Ok so push the authentication.conf from the deployer and on each search head and create a authentication.conf in system/local without the bind password in the stanza in clear text. something like this  [ldap_1] bindDNpassword = abc123 then do a rolling restart on all of sh cluster and then the password should be encrypted ... View more