[Samba] Role of TLS in LDAP for Samba 3.x

[Arup Biswas]

I am wondering if there is any documentation that describes the role TLS
plays in LDAP security in Samba 3.x. I would like to understand what is the
relationship of TLS with other LDAP security mechanisms like Kerberos via
SASL and if TLS provides any added security. Is it like TLS provides an
encrypted channel for all LDAP communications (privacy) whereas Kerberos
just provides the authentication?

I would appreciate any pointer,

Cheers,
-Arup