[Samba] Failed to issue the StartTLS instruction - yet ldap ssl = no is set

[lejeczek]

hi everbody

I have in my smb.conf

   ldap ssl = no
   ldap ssl ads = no

and even:

   ldap server require strong auth = No

yet in logs I see:

[2016/09/14 11:25:05.248282,  0] 
../source3/lib/smbldap.c:575(smbldap_start_tls)
   Failed to issue the StartTLS instruction: Can't contact 
LDAP server

and smbclient(any client) fails

gee, that is weird! right?
ldapsearch runs just fine.
it's Version 4.2.10

would appreciate any suggestions very much
L.