I've been testing start and stop TLS against Kurt's server on www.OpenLDAP.org When I send the close TLS alert to the server, the server shuts down the socket entirely, rather than revert to an anonymous connection (rfc 2830 4.1 and 5.2). - Cameron Morris