Hello Robertson,
I am new to Centrify and AD and I was concerned about the firewall guys, if they will allow me to open 389. If I understand correctly the traffic is still encrypted using a SASL mechanism which is fine I guess.
What I want to know is if in the meanwhile I am able to tell adclient to use TLS on port 636.
Many thanks!
Roman