Sergio's patch worked. As all tests work fine via port 389, and eDirectory/iPlanet servers tested fine on both 389 and 636, my hunch is that it looks like an OpenSSL problem (on at least RedHat Linux). Is anyone from the OpenSSL community on this list to give guidance? Thanks, Gary