diff --git a/CHANGELOG.md b/CHANGELOG.md
index 923f6b8..d2d0643 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -91,3 +91,6 @@ tag: 2.0.1
 
 * 2.3.1 -- 2023-10-06
   - add -p to mkdir so as not to cause a failure if multiple roles created at the same time
+
+* 2.3.2 -- 2023-10-06
+  - change default from ldap.e.tco to ldap2.e.tco
diff --git a/README.md b/README.md
index 9cfe246..1e8b3fa 100644
--- a/README.md
+++ b/README.md
@@ -57,7 +57,7 @@ module "myrole1" {
 
   # optional
   max_session_duration       = 14400 # 4h
-  ldap_host                  = "ldap.e.tco.census.gov"
+  ldap_host                  = "ldap2.e.tco.census.gov"
   ldap_port                  = 389
 }
 ```
@@ -151,7 +151,7 @@ No modules.
 | <a name="input_enable_ldap_creation"></a> [enable\_ldap\_creation](#input\_enable\_ldap\_creation) | Flag to enable/disable LDAP object creation for role group (for SAML only). Also requires LDAP credentials. | `bool` | `false` | no |
 | <a name="input_inline_policies"></a> [inline\_policies](#input\_inline\_policies) | List of IAM Policy Document objects to include in this role. Format is {name=name,policy=policy-json} | `list(object({ name = string, policy = string }))` | `[]` | no |
 | <a name="input_instance_profile_path"></a> [instance\_profile\_path](#input\_instance\_profile\_path) | Instance profile path | `string` | `"/"` | no |
-| <a name="input_ldap_host"></a> [ldap\_host](#input\_ldap\_host) | LDAP Hostname (default is for eBOCAS) | `string` | `"ldap.e.tco.census.gov"` | no |
+| <a name="input_ldap_host"></a> [ldap\_host](#input\_ldap\_host) | LDAP Hostname (default is for eBOCAS) | `string` | `"ldap2.e.tco.census.gov"` | no |
 | <a name="input_ldap_password"></a> [ldap\_password](#input\_ldap\_password) | LDAP password for ldap\_user for writing data into eDirectory or Active Directory | `string` | `""` | no |
 | <a name="input_ldap_port"></a> [ldap\_port](#input\_ldap\_port) | LDAP port (default is 389 but also using STARTTLS) | `number` | `389` | no |
 | <a name="input_ldap_user"></a> [ldap\_user](#input\_ldap\_user) | LDAP user for writing data into eDirectory or Active Directory | `string` | `""` | no |
diff --git a/main.tf b/main.tf
index c1b3de2..22d0f54 100644
--- a/main.tf
+++ b/main.tf
@@ -58,7 +58,7 @@
 * 
 *   # optional
 *   max_session_duration       = 14400 # 4h
-*   ldap_host                  = "ldap.e.tco.census.gov"
+*   ldap_host                  = "ldap2.e.tco.census.gov"
 *   ldap_port                  = 389
 * }
 * ```
diff --git a/variables.ldap.tf b/variables.ldap.tf
index 5b7f231..a00fc6c 100644
--- a/variables.ldap.tf
+++ b/variables.ldap.tf
@@ -16,7 +16,7 @@ variable "ldap_password" {
 variable "ldap_host" {
   description = "LDAP Hostname (default is for eBOCAS)"
   type        = string
-  default     = "ldap.e.tco.census.gov"
+  default     = "ldap2.e.tco.census.gov"
 }
 
 variable "ldap_port" {
diff --git a/version.tf b/version.tf
index 2f6932c..a168c0c 100644
--- a/version.tf
+++ b/version.tf
@@ -1,4 +1,4 @@
 locals {
   #  _module_version = "1.4.0"
-  _module_version = "2.3.1"
+  _module_version = "2.3.2"
 }