I think that TLSCipherSuite affects both StartTLS and SSL connections. Have you tried !SSLv2 and seen a result one way or another? On Wed, 31 May 2006, John Borwick wrote: > I am familiar with the "TLSCipherSuite" option for slapd.conf. Is there > an equivalent option to control ldaps (port 636) SSL connections? I > would like to disable SSL v2 support for slapd running on port 636.