RE: OpenLDAP and TLS

[Paul Reilly <pareilly@tcd.ie>]

I'm just starting out with TLS / SASL etc and I'm not sure exactly how
to set it up. Basically I just want all connections to the server to
connect over SSL on 689 and not plain text on port 389 so people can't
look at the packets.

Q1: Is it possible to do this just with TLS, or do I need to use SASL too?
    Up to now I've been using basic authentication.

Q2: Can I use a self-signed cert for the server?

Q3: Are there any HOWTO's /docs on how to set this up!

Thanks

Paul