Hope that someone can make sense of this. Just to be clear: ldapsearch behaves the same way as described above for openssl s_client. Thank you very much for even reading so far.
If slapd is the one failing to send data, why don't you turn up the debugging level on the slapd side and see what it thinks is happening? I.e., start slapd by hand with something like -d 2 or -d -1 and see what it reports at the time at which the connection hangs.
--Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration