RE: (ITS#8374) LDAP_OPT_X_TLS_REQUIRE_CERT handling differences between ldaps:// and STARTTLS

[dog@pavlov.com]

Hi,

This is a piece of code that I'm working on, rather than any bundled commands. The code works just fine (has for months) however I noticed in unit testing the operations empirically that the LDAP_OPT_X_TLS_REQUIRE_CERT option was handled differently depending on whether the TLS was provided implicitly over an ldaps: URI, or explicitly on an ldap: URI with STARTTLS.

The pseudo sequence of functions is as follows:

ldap_initialize
ldap_set_option (various)
if uri != ldaps: then ldap_start_tls_s
ldap_sasl_bind_s

Martin...