I found out that only one of our AD server pool is listening (and responding!) on the SSL port. I changed my Perl script to connect to that specific AD server and am getting better results. I am still getting an error (see below) trying to change the unicodePWD, but I think this is now an AD configuration issue, not a Perl and Net::Ldap issue.
"LDAP_CONSTRAINT_VIOLATION: The request contains a value which does not meet with certain constraints." Dan Does IO::Socket::SSL actually work on your box? Did 'make test' in the IO-Socket-SSL distribution work? Is your server (AD?) listening on the LDAPS port? Just try making a connection to port 636 (I think) using telnet. If you get a 'connected' the server's listening. Cheers, Chris