So using 3268 vs 389 depends on what you are trying to do with LDAP Authentication on why you would want/need to query the Global Catalog specifically.