I vaguely remember there were bugs in back-ldap/back-meta ignoring TLS options. The work-around back then was to set env var LDAPTLS_CACERT and friends when starting slapd to let libldap pick up the TLS options from env. Should be fixed in recent releases OpenLDAP though.
Ha, one of the few times I failed to ask what version of OpenLDAP was being used...
Jon, what OpenLDAP release are you running? --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>