OpenLDAP and TLS auth example, please

[backseat]

Does anyone have an example of configuring an OpenLDAP TLS connection for authentication?

I've tried:

auth.settings.login_methods.append(ldap_auth(
    server='my.ldap.server',
    base_dn='ou=users,dc=my,dc=ldap,dc=server',
    secure=True,
    port=389,
))

...but that fails with "Invalid login" (using a valid, existing OpenLDAP username/pw).

Removing the "secure=True" gets me a "confidentiality required" back from the LDAP server.

Removing the "port=389" uses port 636 (as I'd expect); the OpenLDAP+TLS server is definitely listening on 389.

Thoughts? Suggestions?

Thanks.

[backseat]

Hmm, we may have an LDAP server issue. Ignore for now; sorry for the noise.