Has anyone seen this? > ldapsearch -ZZ ... ldap_start_tls: Success > i.e. a "Success" error code, followed by an exit. Changing to the less stringent -Z, > ldapsearch -Z ... ldap_start_tls: Success ... answers ... > debugging this latter case, the server appears to be working in TLS when giving the results, so it looks like start TLS works, but ldap_start_tls_s is returning a code not equal to LDAP_SUCCESS.