Anyone know if running Alfresco over ssl is required (using LDAP auth), and if so, does alfresco handle that or is it a case of tweaking the tomcat installation?
You can run Alfresco with or without SSL. All you have to do is to configure Alfresco-Tomcat to run it over SSL. For Alfresco the way you run it is transparent.