hm?

the ldap-encryption just encrypts the communication to the ldap-server, like authentication, user/group information, ldapsearch too of course

once you are on the machine, ldaps job is done, you need to use ssh/sftp to encrypt the whole datatransfer

edit: oh I guess you mean the login information is not encrypted?

I use almost the same setup with tivoli directory server, I'll see if it's not encrypted too on my aix systems, would be very bad if thats the case