I have finally taken a look atpython-ldap 2.0. Is there a way to do start_tls are are you restricted to ldap.initialize('ldaps://...')? Dave