When <host>:636 or <host>:3269 is specified, authentication fails with a 'socket closed' error. I've confirmed that these ports on the domain controller are working and available by setting up the LDAP plugin using them. I've attached the logs generated by the authentication attempt. A network capture indicates that a handshake is occurring.