I've been thinking a bit more about the different uses of "connections" in the document. It seems that "LDAP connection" is used both to refer to the underlying transport connection as well as the LDAP-level connection (e.g., the layer in which LDAP messages are exchanged), and that this is causing some confusion in the specification. Kurt