diff options
author | Sumit Bose <sbose@redhat.com> | 2009-09-16 13:02:47 +0200 |
---|---|---|
committer | Stephen Gallagher <sgallagh@redhat.com> | 2009-09-16 13:29:08 -0400 |
commit | ed615a8b7a3053f12b557bd73e4fb1d56f7d2c8e (patch) | |
tree | ad9dccac1d933b5e4dc7f2972b94aea91a5beed6 /server/krb5_plugin | |
parent | cc98edd9479d4622634a1275c98058916c14059a (diff) | |
download | sssd-ed615a8b7a3053f12b557bd73e4fb1d56f7d2c8e.tar.gz sssd-ed615a8b7a3053f12b557bd73e4fb1d56f7d2c8e.tar.bz2 sssd-ed615a8b7a3053f12b557bd73e4fb1d56f7d2c8e.zip |
Check if SSL/TLS handler is already in place
Authentication against a LDAP server should always use an
encrypted connection. To acchive this the LDAP provider calls
ldap_start_tls which will fail if the connection is already
encrypted, e.g. if an ldaps tunnel is already established.
Because the error message from ldap_start_tls is not specific we
check the status with ldap_tls_inplace before calling ldap_start_tls.
Diffstat (limited to 'server/krb5_plugin')
0 files changed, 0 insertions, 0 deletions