When we view smb.conf via VIEW menu on SWAT, "ldap ssl = no" is always shown.
Created attachment 3810 [details] a quick-hack patch to fix this problem a quick-hack patch for this problem. Actually I do not understand what is happened when "ldap ssl = on".
"ldap ssl = on" does not exist in the meantime (just use ldaps URI in the specified passdb backend instead). So there are currently only two valid values: "no" and start "tls". The documentation was not up-to-date for a while. The code and the documentation has been updated meanwhile. Bug will be fixed with 3.2.8 and 3.3.0. Thanks for report!