Yes. In the Windows Active Directory world (and I suspect in all LDAP authentication) you'll need to use LDAPS connections to do this.
http://docs.moodle.org/24/en/LDAP_authentication has all the docs and walkthroughs for this. We use LDAPS and users can request their password resets without helpdesk intervention.