VMware vSphere & Microsoft LDAP Channel Binding & Signing patch
Due to CVE-2017-8563 potential exploit, Microsoft is changing behavior of AD to accept connections only using TLS.
See external links:
Test if LDAP server listens to ports TCP636 and TCP3269:
Go to Configuration > System Configuration > System > Enterprise Integration > Directory Services