Try adding the -Z flag to turn on encryption. Your servers CN on the certificate must also match the hostname of the server.
> question 1:
> port 389 is opened yet when I scan the LDAP Server by nmap, but I could not
> connect it with Apache Directory Studio v1.5.3.
> question 2:
> Nmap tell me "server still supports SSLv2", but I set TLSCipherSuite is
> question 3:
> I try to import some data with ldapmodify
> ldapmodify -a -H ldap://mydomain.org:636
-D "cn=admin,dc=mydomain,dc=org" -x
> -w whatever -f init.ldif