Thread:Extension talk:LDAP Authentication/SSL Help/reply

If you use clear, it will send passwords unencrypted to your AD server. You need to use SSL.