The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-37020.json"