Kurt, I've since discovered that we have upgrade issues on our system, that make calling LDAPS:// directly not really an option at present. Cheers, Nigel