how to verify which clients are using start_tls

["Bradley W. Langhorst" <brad@langhorst.com>]

I've implemeted an ldap server for
authentication with libnss-ldap 
and password changing with libpam-ldap

samba and phpgroupware are also talking authenticating happily.

I'm using "ssl start_tls" instead of "ssl on" because I want to allow
connections by mail clients, etc for access to non-sensitve information.

I don't want any authenticated access happening in the clear but I don't
know how to enforce that policy.

any suggestions?

thanks!

brad