We don't support LDAP natively from our wireless solution. We use Radius to interoperate with authentication servers. Your options are to enable the Radius service on your AD server or use NAC as an intermediary. We are considering adding LDAP/LDAPS natively into a future TBD release. Is there a reason that NAC does not address your current need? It would be good for us to understand this requirement for our future planning.