I'd say your underlying problem is using TLS 1.1 and not updating your LDAP server, the version of which must also be too old. Wouldn't you agree that it's bad practice?
Yes, of course. Unfortunately, as a consultant, you don't always have the necessary influence to change boundary conditions.