Is it possible that communication between ActiveDirectory and ADSelfService server be Kerberos (not LDAP/LDAPS).