From b738dd0fb2b443db9219013885be38e663c63685 Mon Sep 17 00:00:00 2001 From: YmrDtnJu Date: Sat, 31 Dec 2016 13:57:49 +0100 Subject: Do not call ldap_start_tls_s on ldapi:// connections. The code already skips the initialisation of TLS on LDAP connections over unix sockets but the call to ldap_start_tls_s is done nonetheless. --- src/src/lookups/ldap.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/src/lookups/ldap.c b/src/src/lookups/ldap.c index 3db787cce..b8a326834 100644 --- a/src/src/lookups/ldap.c +++ b/src/src/lookups/ldap.c @@ -580,7 +580,7 @@ if (!lcp->bound || { DEBUG(D_lookup) debug_printf("%sbinding with user=%s password=%s\n", (lcp->bound)? "re-" : "", user, password); - if (eldap_start_tls && !lcp->is_start_tls_called) + if (eldap_start_tls && !lcp->is_start_tls_called && !ldapi) { #if defined(LDAP_OPT_X_TLS) && !defined(LDAP_LIB_SOLARIS) /* The Oracle LDAP libraries (LDAP_LIB_TYPE=SOLARIS) don't support this. -- cgit v1.2.3